CVE-2022-4457

Summary

Due to a misconfiguration in the manifest file of the WARP client for Android, it was possible to a perform a task hijacking attack. An attacker could create a malicious mobile application which could hijack legitimate app and steal potentially sensitive information when installed on the victim's device.

Affected Software

Weaknesses

• CWE-200: CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

ADP Enrichment

CVE Program Container

Additional References

• https://github.com/cloudflare/advisories/security/advisories/GHSA-35f7-fqrc-4hhj

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://github.com/cloudflare/advisories/security/advisories/GHSA-35f7-fqrc-4hhj

• ←Previous
• Next→