Unrated severityNVD Advisory· Published Sep 1, 2022· Updated Aug 3, 2024
CVE-2022-36130
CVE-2022-36130
Description
HashiCorp Boundary up to 0.10.1 did not properly perform data integrity checks to ensure the resources were associated with the correct scopes, allowing potential privilege escalation for authorized users of another scope. Fixed in Boundary 0.10.2.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
2- discuss.hashicorp.commitrex_refsource_MISC
- discuss.hashicorp.com/t/hcsec-2022017-boundary-allowed-access-to-host-sets-and-credential-sources-for-authorized-users-of-another-scope/43493mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.