GO-2024-3179

vendorUSosv

Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

view advisory published 2024-10-09Licence: per source

Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2024-47616US—OT elevated—
Pomerium is an identity and context-aware access proxy. The Pomerium databroker service is responsible for managing all persistent Pomerium application state. Requests to the datab…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan