Skip to content
OpenAdvisories

Package · Go

github.com/hashicorp/boundary

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.9
    CVE-2024-12289

    Boundary Controller Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service

    Boundary Community Edition and Boundary Enterprise (“Boundary”) incorrectly handle HTTP requests during the initialization of the Boundary controller, which may cause the Boundary server to terminate prematurely. Boundary is only vulnerable to this flaw durin…

    HashiCorp Boundary Boundary Enterprise github.com/hashicorp/boundary Go
  • Medium 5.0
    CVE-2023-0690

    Boundary Workers Store Rotated Credentials in Plaintext Even When a Key Management Service Configured

    HashiCorp Boundary from 0.10.0 through 0.11.2 contain an issue where when using a PKI-based worker with a Key Management Service (KMS) defined in the configuration file, new credentials created after an automatic rotation may not have been encrypted via the i…

    HashiCorp Boundary github.com/hashicorp/boundary Go
  • Medium 6.1
    CVE-2022-36182

    Hashicorp Boundary vulnerable to clickjacking

    Hashicorp Boundary v0.8.0 is vulnerable to Clickjacking which allow for the interception of login credentials, re-direction of users to malicious sites, or causing users to perform malicious actions on the site.

    github.com/hashicorp/boundary Go