Warp Mobile Client vulnerabilities

3 known vulnerabilities in Warp Mobile Client from Cloudflare. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.5 High severity

  WARP: Authentication Bypass by Spoofing

  CVE-2022-3337Oct 28, 2022Cloudflare

  It was possible for a user to delete a VPN profile from WARP mobile client on iOS platform despite the Lock WARP switch https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp/warp-settings/#lock-warp-switch feature being enabled on Z

• 7.5 High severity

  WARP: Improper Verification of Cryptographic Signature

  CVE-2022-3322Oct 28, 2022Cloudflare

  Lock Warp switch is a feature of Zero Trust platform which, when enabled, prevents users of enrolled devices from disabling WARP client. Due to insufficient policy verification by WARP iOS client, this feature could be bypassed by using the "Disable WARP" quic

• 8.2 High severity

  WARP: Missing Authorization

  CVE-2022-3321Oct 28, 2022Cloudflare

  It was possible to bypass Lock WARP switch feature https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp/warp-settings/#lock-warp-switch on the WARP iOS mobile client by enabling both "Disable for cellular networks" and "Disable for