Vulnerability CVE-2022-36130
Published: 2022-09-01

Description:
HashiCorp Boundary up to 0.10.1 did not properly perform data integrity checks to ensure the resources were associated with the correct scopes, allowing potential privilege escalation for authorized users of another scope. Fixed in Boundary 0.10.2.

 References:
https://discuss.hashicorp.com/t/hcsec-2022017-boundary-allowed-access-to-host-sets-and-credential-sources-for-authorized-users-of-another-scope/43493
https://discuss.hashicorp.com
Copyright 2026, cxsecurity.com

 

Back to Top