VULNERABILITY INTELLIGENCE

CVE-2022-3322

CVSS score6.7 MEDIUM
EPSS probability0.29%
CISA KEVNot currently listed
Published2022-10-28
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:L

Description

Lock Warp switch is a feature of Zero Trust platform which, when enabled, prevents users of enrolled devices from disabling WARP client. Due to insufficient policy verification by WARP iOS client, this feature could be bypassed by using the "Disable WARP" quick action.

Weakness classification

  • CWE-347: Improper Verification of Cryptographic Signature
  • CWE-862: Missing Authorization

Primary references