Executive brief
Hashicorp Boundary vulnerable to clickjacking
Affected products
- Go github.com/hashicorp/boundary
Junglewise Threat Intelligence
CVE-2022-36182: Hashicorp Boundary vulnerable to clickjacking
CVE-2022-36182 · Severity: low · CVSS 3.1 · Published 2022-10-27
Technologies: github.com/hashicorp/boundary (Go). Vendors: Go.
Related threats
- HashiCorp Boundary denial of service in worker node enrollment
- GO-2024-3335 - Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp
- GO-2023-1898 - HashiCorp Boundary Workers Store Rotated Credentials in Plaintext Even When Key Management Service Configured in github.com/hashicorp/bounda
- GO-2024-2532 - Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary