Executive brief
Incorrect Authorization in ORY Oathkeeper
Affected products
- Go github.com/ory/oathkeeper
Junglewise Threat Intelligence
CVE-2021-32701: Incorrect Authorization in ORY Oathkeeper
CVE-2021-32701 · Severity: low · CVSS 3.1 · Published 2021-06-24
Technologies: github.com/ory/oathkeeper (Go). Vendors: Go.
Related threats
- GO-2026-4804 - Ory Oathkeeper has a path traversal authorization bypass in github.com/ory/oathkeeper
- GO-2026-4810 - Ory Oathkeeper has an authentication bypass by usage of untrusted header in github.com/ory/oathkeeper
- GO-2026-4799 - Ory Oathkeeper has an authentication bypass by cache key confusion in github.com/ory/oathkeeper
- GO-2022-0920 - Incorrect Authorization in ORY Oathkeeper in github.com/ory/oathkeeper
- GO-2022-0406 - Possible bypass of token claim validation when OAuth2 Introspection caching is enabled in github.com/ory/oathkeeper