CVE-2023-0652
Last modified
CVE-2023-0652 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. Due to a hardlink created in the ProgramData folder during the repair process of the software, the installer (MSI) of WARP Client for Windows (<= 2022.12.582.0) allowed a malicious attacker to forge the destination of the hardlink and escalate privileges, overwriting SYSTEM protected files. As Cloudflare WARP client for Windows (up to version 2022.5.309.0) allowed creation of mount points from its ProgramData folder, during installation of the WARP client, it was possible to escalate privileges and overwrite SYSTEM protected files. . EPSS estimates a 0.29% chance of exploitation in the next 30 days.
Description
Due to a hardlink created in the ProgramData folder during the repair process of the software, the installer (MSI) of WARP Client for Windows (<= 2022.12.582.0) allowed a malicious attacker to forge the destination of the hardlink and escalate privileges, overwriting SYSTEM protected files. As Cloudflare WARP client for Windows (up to version 2022.5.309.0) allowed creation of mount points from its ProgramData folder, during installation of the WARP client, it was possible to escalate privileges and overwrite SYSTEM protected files.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cloudflare | Warp | < 2023.3.381.0 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-0652?
How severe is CVE-2023-0652?
How do I fix CVE-2023-0652?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-0646A vulnerability classified as critical was found in dst-admi…7.5
- CVE-2023-0647A vulnerability, which was classified as critical, has been …7.5
- CVE-2023-0648A vulnerability, which was classified as critical, was found…7.5
- CVE-2023-0649A vulnerability has been found in dst-admin 1.5.0 and classi…7.5
- CVE-2023-0650A vulnerability was found in YAFNET up to 3.1.11 and classif…5.4
- CVE-2023-0651A vulnerability was found in FastCMS 0.1.0. It has been clas…9.8
- CVE-2023-0654Due to a misconfiguration, the WARP Mobile Client (< 6.29) f…3.7
- CVE-2023-0655SonicWall Email Security contains a vulnerability that could…5.3
- CVE-2023-0656A Stack-based buffer overflow vulnerability in the SonicOS a…7.5
- CVE-2023-0657A flaw was found in Keycloak. This issue occurs due to impro…3.4
- CVE-2023-0658A vulnerability, which was classified as critical, was found…7.5
- CVE-2023-0659A vulnerability was found in BDCOM 1704-WGL 2.0.6314. It has…7.5
Are you affected by CVE-2023-0652?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST