CVE-2023-0652 (warp) | allinfosecnews.com

April 6, 2023, 10:15 a.m. |

National Vulnerability Database web.nvd.nist.gov

Due to a hardlink created in the ProgramData folder during the repair process of the software, the installer (MSI) of WARP Client for Windows (<= 2022.12.582.0) allowed a malicious attacker to forge the destination of the hardlink and escalate privileges, overwriting SYSTEM protected files. As Cloudflare WARP client for Windows (up to version 2022.5.309.0) allowed creation of mount points from its ProgramData folder, during installation of the WARP client, it was possible to escalate privileges and overwrite SYSTEM protected files.

client cloudflare cve files folder forge installation installer malicious msi privileges process repair software system version warp windows

More from web.nvd.nist.gov / National Vulnerability Database

CVE-2023-45955 (lightstrip_firmware) 6 months, 1 week ago | web.nvd.nist.gov

attackers cve denial of service issue +1

CVE-2023-40101 (android) 6 months, 1 week ago | web.nvd.nist.gov

android check collapse cve +7

CVE-2023-21377 (android) 6 months, 1 week ago | web.nvd.nist.gov

android bypass cve disclosure +8

CVE-2023-21380 (android) 6 months, 1 week ago | web.nvd.nist.gov

android bluetooth buffer buffer overflow +9

CVE-2023-21382 (android) 6 months, 1 week ago | web.nvd.nist.gov

access android check cve +11

CVE-2023-21381 (android) 6 months, 1 week ago | web.nvd.nist.gov

android arbitrary code code code execution +10

CVE-2023-21385 (android) 6 months, 1 week ago | web.nvd.nist.gov

android corruption cve disclosure +7

CVE-2023-21387 (android) 6 months, 1 week ago | web.nvd.nist.gov

android backup bypass cve +11

CVE-2023-21389 (android) 6 months, 1 week ago | web.nvd.nist.gov

android bypass check cve +10

Sr. Staff Security Engineer

@ Databricks | San Francisco, California

View on infosec-jobs.com

Security Engineer

@ Nomi Health | Austin, Texas

View on infosec-jobs.com

Senior Principal Consultant, Security Architecture

@ 6point6 | Manchester, United Kingdom

View on infosec-jobs.com

Cyber Policy Advisor

@ IntelliBridge | McLean, VA, McLean, VA, US

View on infosec-jobs.com

TW Full Stack Software Engineer (Access Control & Intrusion Systems)

@ Bosch Group | Taipei, Taiwan

View on infosec-jobs.com

Cyber Software Engineer

@ Peraton | Annapolis Junction, MD, United States

View on infosec-jobs.com