CRITICAL🇵🇱 Wersja polska

CVE-2023-33189

CVSS 10.0v3.1pub. 2023-05-30upd. 2024-11-21

Pomerium is an identity and context-aware access proxy. With specially crafted requests, incorrect authorization decisions may be made by Pomerium. This issue has been patched in versions 0.17.4, 0.18.1, 0.19.2, 0.20.1, 0.21.4 and 0.22.2.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

  • Pomerium

    APP
    Pomerium
    0.18.00.20.0< 0.17.40.19.0 – 0.19.2 (bez)0.21.0 – 0.21.4 (bez)0.22.0 – 0.22.2 (bez)
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2021-39204HIGH7.5ten sam produkt

Pomerium is an open source identity-aware access proxy. Envoy, which Pomerium is based on, incorrectly handles...

CVE-2021-39206HIGH8.6ten sam produkt

Pomerium is an open source identity-aware access proxy. Envoy, which Pomerium is based on, contains two author...

CVE-2021-39162HIGH8.6ten sam produkt

Pomerium is an open source identity-aware access proxy. Envoy, which Pomerium is based on, can abnormally term...

CVE-2024-39315MEDIUM5.7ten sam produkt

Pomerium is an identity and context-aware access proxy. Prior to version 0.26.1, the Pomerium user info page (...

CVE-2022-24797MEDIUM6.5ten sam produkt

Pomerium is an identity-aware access proxy. In distributed service mode, Pomerium's Authenticate service expos...