Pomerium
8 CVEs across 1 Pomerium products. Browse Pomerium vulnerabilities, severities, and proof-of-concept exploits.
Pomerium products with known CVEs
Pomerium CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2024-47616 | Medium | 6.8 | 2024-10-02 | Pomerium is an identity and context-aware access proxy. The Pomerium databroker service is responsible for managing all persistent Pomerium application state… |
CVE-2024-39315 | Medium | 5.7 | 2024-07-02 | Pomerium is an identity and context-aware access proxy. Prior to version 0.26.1, the Pomerium user info page (at `/.pomerium`) unintentionally included seriali… |
CVE-2023-33189 | Critical | 10.0 | 2023-05-30 | Pomerium is an identity and context-aware access proxy. With specially crafted requests, incorrect authorization decisions may be made by Pomerium. This issue… |
CVE-2022-24797 | Medium | 6.5 | 2022-03-31 | Pomerium is an identity-aware access proxy. In distributed service mode, Pomerium's Authenticate service exposes pprof debug and prometheus metrics handlers to… |
CVE-2021-41230 | Medium | 5.3 | 2021-11-05 | Pomerium is an open source identity-aware access proxy. In affected versions changes to the OIDC claims of a user after initial login are not reflected in poli… |
CVE-2021-39206 | High | 8.6 | 2021-09-09 | Pomerium is an open source identity-aware access proxy. Envoy, which Pomerium is based on, contains two authorization related vulnerabilities CVE-2021-32777 an… |
CVE-2021-39204 | High | 7.5 | 2021-09-09 | Pomerium is an open source identity-aware access proxy. Envoy, which Pomerium is based on, incorrectly handles resetting of HTTP/2 streams with excessive compl… |
CVE-2021-39162 | High | 8.6 | 2021-09-09 | Pomerium is an open source identity-aware access proxy. Envoy, which Pomerium is based on, can abnormally terminate if an H/2 GOAWAY and SETTINGS frame are rec… |
CVE-2021-29652 | Medium | 6.1 | 2021-04-02 | Pomerium from version 0.10.0-0.13.3 has an Open Redirect in the user sign-in/out process |
CVE-2021-29651 | Medium | 6.1 | 2021-04-02 | Pomerium before 0.13.4 has an Open Redirect (issue 1 of 2). |