Executive brief
HashiCorp Boundary Workers Store Rotated Credentials in Plaintext Even When Key Management Service Configured in github.com/hashicorp/boundary
Affected products
- Go github.com/hashicorp/boundary
Junglewise Threat Intelligence
CVE-2023-0690: GO-2023-1898 - HashiCorp Boundary Workers Store Rotated Credentials in Plaintext Even When Key Management Service Configured in github.com/hashicorp/bounda
CVE-2023-0690 · Severity: low · CVSS 3.1 · Published 2024-08-20
Technologies: github.com/hashicorp/boundary (Go). Vendors: Go.
Related threats
- HashiCorp Boundary denial of service in worker node enrollment
- GO-2024-3335 - Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp
- GO-2024-2532 - Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary
- Hashicorp Boundary vulnerable to clickjacking