CVE-2023-0654

LowCVSS 3.7/10Last modified Jun 17, 2026

Description

Due to a misconfiguration, the WARP Mobile Client (< 6.29) for Android was susceptible to a tapjacking attack. In the event that an attacker built a malicious application and managed to install it on a victim's device, the attacker would be able to trick the user into believing that the app shown on the screen was the WARP client when in reality it was the attacker's app.

Metrics

CVSS 3.1 3.7/10CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published
Aug 29, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-06555.3SonicWall Email Security contains a vulnerability that could permit a remote unauthenticated attacker access to an error page that includes CVE-2023-06567.5A Stack-based buffer overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS), which CVE-2023-06573.4A flaw was found in Keycloak. This issue occurs due to improperly enforcing token types when validating signatures locally. This could allowCVE-2023-06587.5A vulnerability, which was classified as critical, was found in Multilaser RE057 and RE170 2.1/2.2. This affects an unknown part of the fileCVE-2023-06597.5A vulnerability was found in BDCOM 1704-WGL 2.0.6314. It has been classified as critical. This affects an unknown part of the file /param.fiCVE-2023-06605.4The Smart Slider 3 WordPress plugin before 3.5.1.14 does not properly validate and escape some of its shortcode attributes before outputtingCVE-2023-06616.5Improper access control in Devolutions Server allows an authenticated user to access unauthorized sensitive data.CVE-2023-06627.5In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, excessive number of parts in HTTP form upload can cause high resourcCVE-2023-06639.8A vulnerability was found in Calendar Event Management System 2.3.0. It has been rated as critical. This issue affects some unknown processiCVE-2023-06647.8A flaw was found in the QEMU Guest Agent service for Windows. A local unprivileged user may be able to manipulate the QEMU Guest Agent's WinCVE-2023-06656.5HashiCorp Vault's PKI mount issuer endpoints did not correctly authorize access to remove an issuer or modify issuer metadata, potentially rCVE-2023-06666.5Due to failure in validating the length provided by an attacker-crafted RTPS packet, Wireshark version 4.0.5 and prior, by default, is susce
CVE-2023-0654: Low severity, CVSS 3.7 | Vulnix