TI-2024-26271 CVE-2024-39315 · GHSA-rrqr-7w59-637v
Pomerium exposed OAuth2 access and ID tokens in user info endpoint response
Priority LOW 29
Pomerium is an identity and context-aware access proxy.
Vulnerabilities
9 records
TI-2023-16366 CVE-2023-33189 · GHSA-pvrc-wvj2-f59p
Incorrect Authorization with specially crafted requests
Priority MEDIUM 51
Pomerium is an identity and context-aware access proxy.
TI-2022-08610 CVE-2022-24797 · GHSA-q98f-2x4p-prjr
Exposure of Sensitive Information in Pomerium
Priority MEDIUM 48
Pomerium is an identity-aware access proxy.
TI-2021-18069 CVE-2021-41230 · GHSA-j6wp-3859-vxfg
OIDC claims not updated from Identity Provider in Pomerium
Priority MEDIUM 40
Pomerium is an open source identity-aware access proxy.
TI-2021-16591 CVE-2021-39206 · GHSA-cfc2-wjcm-c8fm
Incorrect Authorization with specially crafted requests
Priority MEDIUM 40
Pomerium is an open source identity-aware access proxy.
TI-2021-16589 CVE-2021-39204 · GHSA-5wjf-62hw-q78r
Excessive CPU usage in Pomerium
Priority LOW 36
Pomerium is an open source identity-aware access proxy.
TI-2021-16548 CVE-2021-39162 · GHSA-gjcg-vrxg-xmgv
Incorrect handling of H2 GOAWAY + SETTINGS frames
Priority MEDIUM 41
Pomerium is an open source identity-aware access proxy.
TI-2021-10352 CVE-2021-29652 · GHSA-fv82-r8qv-ch4v
Pomerium from version 0.10.0-0.13.3 has an Open Redirect in the user sign-in/out process
Priority LOW 28
Pomerium from version 0.10.0-0.13.3 has an Open Redirect in the user sign-in/out process
TI-2021-10351 CVE-2021-29651 · GHSA-35vc-w93w-75c2
Pomerium before 0.13.4 has an Open Redirect (issue 1 of 2).
Priority LOW 28
Pomerium before 0.13.4 has an Open Redirect (issue 1 of 2).