Executive brief
Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary
Affected products
- Go github.com/hashicorp/boundary
Junglewise Threat Intelligence
CVE-2024-1052: GO-2024-2532 - Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary
CVE-2024-1052 · Severity: low · CVSS 3.1 · Published 2024-06-28
Technologies: github.com/hashicorp/boundary (Go). Vendors: Go.
Related threats
- HashiCorp Boundary denial of service in worker node enrollment
- GO-2024-3335 - Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp
- GO-2023-1898 - HashiCorp Boundary Workers Store Rotated Credentials in Plaintext Even When Key Management Service Configured in github.com/hashicorp/bounda
- Hashicorp Boundary vulnerable to clickjacking