{"id":"CVE-2022-3322","aliases":["EUVD-2022-42712"],"status":"published","title":"Lock WARP switch bypass on WARP mobile client using iOS quick action","description":"Lock Warp switch is a feature of Zero Trust platform which, when\n enabled, prevents users of enrolled devices from disabling WARP client.\n Due to insufficient policy verification by WARP iOS client, this \nfeature could be bypassed by using the \"Disable WARP\" quick action.","severity":{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00288,"percentile":0.21485,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-347","CWE-862"],"published":"2022-10-28T09:25:55Z","modified":"2026-06-17T04:59:18Z","products":[{"vendor":"cloudflare","product":"warp"},{"vendor":"cloudflare","product":"warp_mobile_client"},{"vendor":"fatpipe","product":"warp"}],"references":[{"url":"https://github.com/cloudflare/advisories/security/advisories/GHSA-76pg-rp9h-wmcj","tags":["x_transferred","Third Party Advisory"]}],"sources":{"cve":[{"id":"CVE-2022-3322","title":"Lock WARP switch bypass on WARP mobile client using iOS quick action","description":"Lock Warp switch is a feature of Zero Trust platform which, when\n enabled, prevents users of enrolled devices from disabling WARP client.\n Due to insufficient policy verification by WARP iOS client, this \nfeature could be bypassed by using the \"Disable WARP\" quick action.\n\n\n\n","status":"published","published":"2022-10-28T09:25:55.997Z","modified":"2025-05-05T20:15:49.618Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:34:33.574107Z"}],"euvd":[{"id":"EUVD-2022-42712","description":"Lock Warp switch is a feature of Zero Trust platform which, when\n enabled, prevents users of enrolled devices from disabling WARP client.\n Due to insufficient policy verification by WARP iOS client, this \nfeature could be bypassed by using the \"Disable WARP\" quick action.\n\n\n\n","status":"published","published":"2022-10-28T09:25:55Z","modified":"2025-05-05T20:15:49Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:L","level":"medium"}],"updated_at":"2026-11-02T20:32:55.242615Z"}],"nvd":[{"id":"CVE-2022-3322","description":"Lock Warp switch is a feature of Zero Trust platform which, when\n enabled, prevents users of enrolled devices from disabling WARP client.\n Due to insufficient policy verification by WARP iOS client, this \nfeature could be bypassed by using the \"Disable WARP\" quick action.\n\n\n\n","status":"published","published":"2022-10-28T10:15:17.277Z","modified":"2026-06-17T04:59:18.217Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary"}],"cwes":["CWE-862","CWE-347"],"updated_at":"2026-11-02T14:07:31.127985Z"}]}}