Vulnerabilities > CVE-2022-4457 - Unspecified vulnerability in Cloudflare Warp
Attack vector
LOCAL Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
NONE Availability impact
NONE Summary
Due to a misconfiguration in the manifest file of the WARP client for Android, it was possible to a perform a task hijacking attack. An attacker could create a malicious mobile application which could hijack legitimate app and steal potentially sensitive information when installed on the victim's device.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |