Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Lock WARP switch bypass using warp-cli 'add-trusted-ssid' command
Vulnerability Description
Using warp-cli command "add-trusted-ssid", a user was able to disconnect WARP client and bypass the "Lock WARP switch" feature resulting in Zero Trust policies not being enforced on an affected endpoint.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:L
Vulnerability Type
授权机制缺失
Vulnerability Title
Cloudflare WARP 安全漏洞
Vulnerability Description
Cloudflare WARP（Cloudflare Vpn）是美国Cloudflare公司的一个用于安全连接的客户端应用软件。 Cloudflare WARP Zero Trust Secure Web Gateway存在安全漏洞，该漏洞源于攻击者通过warp-cli “add-trusted-ssid”子命令可以断开WARP客户端并绕过“锁定WARP开关”功能，导致在受影响的端点上不执行零信任策略。
CVSS Information
N/A
Vulnerability Type
N/A