Skip to content
OpenAdvisories

Package · Go

github.com/hashicorp/boundary

5 known vulnerabilities.

2 results · Clear filters · Feed

  • High 7.5

    Boundary Workers Vulnerable to Denial of Service During TLS Handshake

    Boundary Community Edition and Boundary Enterprise (“Boundary”) workers are vulnerable to a denial-of-service condition during node enrollment TLS handshakes. An attacker with network access to the worker authentication listener may open a connection and dela…

  • High 8.0

    Boundary Vulnerable to Session Hijacking Through TLS Certificate Tampering

    Boundary and Boundary Enterprise (“Boundary”) is vulnerable to session hijacking through TLS certificate tampering. An attacker with privileges to enumerate active or pending sessions, obtain a private key pertaining to a session, and obtain a valid trust on …