CVE-2020-35152

Privilege escalation through unquoted service binary path on Cloudflare WARP for Windows

State: Published
Severity: 4.5 Medium
Published: Feb 2, 2021
Updated: Sep 16, 2024
Reserved: Dec 11, 2020

Description

Cloudflare WARP for Windows allows privilege escalation due to an unquoted service path. A malicious user or process running with non-administrative privileges can become an administrator by abusing the unquoted service path issue. Since version 1.2.2695.1, the vulnerability was fixed by adding quotes around the service's binary path. This issue affects Cloudflare WARP for Windows, versions prior to 1.2.2695.1.

Scores

CVSS	Score	Vector	Source
3.1	4.5 Medium	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L	cloudflare

Weaknesses

CWE-428

Affected Products

Product	Versions
Cloudflare WARP for WindowsCloudflare	before 1.2.2695.1Affected

References

https://github.com/cloudflare/advisories/security/advisories/GHSA-qc57-v5q8-f22h

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.