Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-33189

Pomerium is an identity and context-aware access proxy. With specially crafted requests, incorrect authorization decisions may be made by Pomerium. This issue has been patched in versions 0.17.4, 0.18.1, 0.19.2, 0.20.1, 0.21.4 and 0.22.2.

Published

2023-05-30T06:16:37.937

Last Modified

2024-11-21T08:05:05.060

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 10.0 (CRITICAL)

Weaknesses

Type: Secondary
CWE-285
Type: Primary
NVD-CWE-Other

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	pomerium	pomerium	< 0.17.4	Yes
Application	pomerium	pomerium	< 0.19.2	Yes
Application	pomerium	pomerium	< 0.21.4	Yes
Application	pomerium	pomerium	< 0.22.2	Yes
Application	pomerium	pomerium	0.18.0	Yes
Application	pomerium	pomerium	0.20.0	Yes

References

https://github.com/pomerium/pomerium/commit/d315e683357a9b587ba9ef399a8813bcc52fdebb Patch ([email protected])
https://github.com/pomerium/pomerium/releases/tag/v0.17.4 Release Notes ([email protected])
https://github.com/pomerium/pomerium/releases/tag/v0.18.1 Release Notes ([email protected])
https://github.com/pomerium/pomerium/releases/tag/v0.19.2 Release Notes ([email protected])
https://github.com/pomerium/pomerium/releases/tag/v0.20.1 Release Notes ([email protected])
https://github.com/pomerium/pomerium/releases/tag/v0.21.4 Release Notes ([email protected])
https://github.com/pomerium/pomerium/releases/tag/v0.22.2 Release Notes ([email protected])
https://github.com/pomerium/pomerium/security/advisories/GHSA-pvrc-wvj2-f59p Vendor Advisory ([email protected])
https://github.com/pomerium/pomerium/commit/d315e683357a9b587ba9ef399a8813bcc52fdebb Patch (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/pomerium/pomerium/releases/tag/v0.17.4 Release Notes (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/pomerium/pomerium/releases/tag/v0.18.1 Release Notes (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/pomerium/pomerium/releases/tag/v0.19.2 Release Notes (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/pomerium/pomerium/releases/tag/v0.20.1 Release Notes (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/pomerium/pomerium/releases/tag/v0.21.4 Release Notes (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/pomerium/pomerium/releases/tag/v0.22.2 Release Notes (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/pomerium/pomerium/security/advisories/GHSA-pvrc-wvj2-f59p Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)