PT-2023-16965 · Cloudflare · Cloudflare Warp Client

Ncabetecf · Publicado 2023-04-05 · Atualizado 2023-04-12 · CVE-2023-1412

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cloudflare WARP Client for Windows versions <= 2022.12.582.0

Description An unprivileged user can exploit an Improper Access Control issue to perform privileged operations with SYSTEM context by using a combination of opportunistic locks and symbolic links. The vulnerability lies in the repair function of the MSI-Installer placed under C:WindowsInstaller after installing the Cloudflare WARP Client. This can lead to attacks including the manipulation of system files and privilege escalation, allowing an attacker to delete arbitrary files and read arbitrary file content.

Recommendations For versions <= 2022.12.582.0, upgrade to version 2023.3.381.0 or later and delete any older installers present in the system to address the vulnerability. As a temporary workaround, consider restricting access to the MSI-Installer under C:WindowsInstaller to minimize the risk of exploitation.

Correção

Link Following

Enumeração de Fraquezas

CWE-59

Identificadores relacionados

CVE-2023-1412

GHSA-HGXH-48M3-3GQ7

Produtos afetados

Cloudflare Warp Client

Referências · 6

• https://github.com/cloudflare/advisories/security/advisories/GHSA-hgxh-48m3-3gq7 · Aviso do Fabricante
• https://install.appcenter.ms/orgs/cloudflare/apps/1.1.1.1-windows-1/distribution_groups/release · Nota
• https://t.me/cibsecurity/61474 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-1412 · Aviso do Fabricante
• https://developers.cloudflare.com/warp-client/get-started/windows · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-1412 · Nota de Segurança