Pomerium 0.7.1

CPE Details

Pomerium 0.7.1
0.7.1
2021-04-05
15h10 +00:00
2021-04-08
12h51 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:pomerium:pomerium:0.7.1:*:*:*:*:*:*:*

Informations

Vendor

pomerium

Product

pomerium

Version

0.7.1

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2023-33189 2023-05-30 05h39 +00:00 Pomerium is an identity and context-aware access proxy. With specially crafted requests, incorrect authorization decisions may be made by Pomerium. This issue has been patched in versions 0.17.4, 0.18.1, 0.19.2, 0.20.1, 0.21.4 and 0.22.2.
10
Critical
CVE-2021-39204 2021-09-09 20h10 +00:00 Pomerium is an open source identity-aware access proxy. Envoy, which Pomerium is based on, incorrectly handles resetting of HTTP/2 streams with excessive complexity. This can lead to high CPU utilization when a large number of streams are reset. This can result in a DoS condition. Pomerium versions 0.14.8 and 0.15.1 contain an upgraded envoy binary with this vulnerability patched.
7.5
High
CVE-2021-29651 2021-04-02 11h54 +00:00 Pomerium before 0.13.4 has an Open Redirect (issue 1 of 2).
6.1
Medium