VULNERABILITY INTELLIGENCE

CVE-2022-36130

CVSS score9.9 CRITICAL
EPSS probability0.48%
CISA KEVNot currently listed
Published2022-09-01
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Description

HashiCorp Boundary up to 0.10.1 did not properly perform data integrity checks to ensure the resources were associated with the correct scopes, allowing potential privilege escalation for authorized users of another scope. Fixed in Boundary 0.10.2.

Weakness classification

  • nvd@nist.gov: CWE-345

Primary references