Pomerium is an identity and context-aware access proxy. With specially crafted requests, incorrect authorization decisions may be made by Pomerium. This issue has been patched in versions 0.17.4, 0.18.1, 0.19.2, 0.20.1, 0.21.4 and 0.22.2.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Pomerium | Pomerium | * | 0.17.4 (excluding) |
| Pomerium | Pomerium | 0.19.0 (including) | 0.19.2 (excluding) |
| Pomerium | Pomerium | 0.21.0 (including) | 0.21.4 (excluding) |
| Pomerium | Pomerium | 0.22.0 (including) | 0.22.2 (excluding) |
| Pomerium | Pomerium | 0.18.0 (including) | 0.18.0 (including) |
| Pomerium | Pomerium | 0.20.0 (including) | 0.20.0 (including) |