Security Advisory

CVE-2022-36130

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-09-01 01:45:00
Last updated 2024-08-03 10:00:04
Assigner mitre
State PUBLISHED

Description

HashiCorp Boundary up to 0.10.1 did not properly perform data integrity checks to ensure the resources were associated with the correct scopes, allowing potential privilege escalation for authorized users of another scope. Fixed in Boundary 0.10.2.