PT-2022-16885 · Pomerium · Pomerium

Name of the Vulnerable Software and Affected Versions: Pomerium versions prior to v0.17.1 Description: Pomerium is an identity-aware access proxy. In distributed service mode, Pomerium's Authenticate service exposes pprof debug and prometheus metrics handlers to untrusted traffic. This can leak...