| Package | Affected versions | Patched versions |
|---|---|---|
| warp | < 2022.8.857.0< 2022.8.861.0< 2022.8.936 | 2022.8.857.02022.8.861.02022.8.936 |
It was possible to bypass policies configured for Zero Trust Secure Web Gateway by using warp-cli 'set-custom-endpoint' subcommand. Using this command with an unreachable endpoint caused the WARP Client to disconnect and allowed bypassing administrative restrictions on a Zero Trust enrolled endpoint.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free