pomerium kayıtları
pomerium üreticisine ait 9 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')2
- CWE-863 Incorrect Authorization2
- CWE-285 Improper Authorization1
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-754 Improper Check for Unusual or Exceptional Conditions1
- CWE-834 Excessive Iteration1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
9 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2023-33189İstismar yok | Incorrect Authorization with specially crafted requestspomerium · pomerium · CWE-285 | Kritik9,8 | — | %0,9 | 30 May 2023 |
36İzleyin | CVE-2022-24797İstismar yok | Exposure of Sensitive Information in Pomeriumpomerium · pomerium · CWE-200 | Kritik9,1 | — | %1,3 | 31 Mar 2022 |
35İzleyin | CVE-2021-41230İstismar yok | OIDC claims not updated from Identity Provider in Pomeriumpomerium · pomerium · CWE-863 | Yüksek8,8 | — | %0,8 | 5 Kas 2021 |
34İzleyin | CVE-2021-39162İstismar yok | Incorrect handling of H2 GOAWAY + SETTINGS framespomerium · pomerium · CWE-754 | Yüksek8,6 | — | %1,6 | 9 Eyl 2021 |
34İzleyin | CVE-2021-39206İstismar yok | Incorrect Authorization with specially crafted requestspomerium · pomerium · CWE-863 | Yüksek8,6 | — | %1,4 | 9 Eyl 2021 |
30İzleyin | CVE-2021-39204İstismar yok | Excessive CPU usage in Pomeriumpomerium · pomerium · CWE-834 | Yüksek7,5 | — | %1,6 | 9 Eyl 2021 |
26İzleyin | CVE-2024-39315İstismar yok | Pomerium exposed OAuth2 access and ID tokens in user info endpoint responsepomerium · pomerium · CWE-201 | Orta6,5 | — | %0,4 | 2 Tem 2024 |
24İzleyin | CVE-2021-29652İstismar yok | Pomerium from version 0.10.0-0.13.3 has an Open Redirect in the user sign-in/out processpomerium · pomerium · CWE-601 | Orta6,1 | — | %0,6 | 2 Nis 2021 |
24İzleyin | CVE-2021-29651İstismar yok | Pomerium before 0.13.4 has an Open Redirect (issue 1 of 2).pomerium · pomerium · CWE-601 | Orta6,1 | — | %0,6 | 2 Nis 2021 |
- CVE-2023-3318939İzleyin
Incorrect Authorization with specially crafted requests
KritikCVSS 9,8İstismar yokEPSS %0pomerium · pomerium30 May 2023
- CVE-2022-2479736İzleyin
Exposure of Sensitive Information in Pomerium
KritikCVSS 9,1İstismar yokEPSS %1pomerium · pomerium31 Mar 2022
- CVE-2021-4123035İzleyin
OIDC claims not updated from Identity Provider in Pomerium
YüksekCVSS 8,8İstismar yokEPSS %0pomerium · pomerium5 Kas 2021
- CVE-2021-3916234İzleyin
Incorrect handling of H2 GOAWAY + SETTINGS frames
YüksekCVSS 8,6İstismar yokEPSS %1pomerium · pomerium9 Eyl 2021
- CVE-2021-3920634İzleyin
Incorrect Authorization with specially crafted requests
YüksekCVSS 8,6İstismar yokEPSS %1pomerium · pomerium9 Eyl 2021
- CVE-2021-3920430İzleyin
Excessive CPU usage in Pomerium
YüksekCVSS 7,5İstismar yokEPSS %1pomerium · pomerium9 Eyl 2021
- CVE-2024-3931526İzleyin
Pomerium exposed OAuth2 access and ID tokens in user info endpoint response
OrtaCVSS 6,5İstismar yokEPSS %0pomerium · pomerium2 Tem 2024
- CVE-2021-2965224İzleyin
Pomerium from version 0.10.0-0.13.3 has an Open Redirect in the user sign-in/out process
OrtaCVSS 6,1İstismar yokEPSS %0pomerium · pomerium2 Nis 2021
- CVE-2021-2965124İzleyin
Pomerium before 0.13.4 has an Open Redirect (issue 1 of 2).
OrtaCVSS 6,1İstismar yokEPSS %0pomerium · pomerium2 Nis 2021