Cloudflare Public Bug Bounty · Report #1542450
Bypass Cloudflare WARP lock on iOS.
Validstatus
mediumseverity
$500bounty
10upvotes
7 Nov 2022disclosed
Summary
Lock Warp switch is a feature of Zero Trust platform which, when enabled, prevents users of enrolled devices from disabling WARP client. Due to insufficient policy verification by the client, this feature could be bypassed by using the "Disable WARP" quick action. The issue affected WARP client mobile application on iOS and was fixed in version 6.14.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.