5.0
Moyenne
CVE-2023-0690 HashiCorp Boundary from 0.10.0 through 0.11.2 contain an issue where when using a PKI-based worker with a Key Management…
Description
HashiCorp Boundary from 0.10.0 through 0.11.2 contain an issue where when using a PKI-based worker with a Key Management Service (KMS) defined in the configuration file, new credentials created after an automatic rotation may not have been encrypted via the intended KMS. This would result in the credentials being stored in plaintext on the Boundary PKI worker’s disk. This issue is fixed in version 0.12.0.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Boundary 0.10 | 0.10.0 → 0.11.2 | Pas de correctif indiqué |
Autres CVE de Boundary
Les 5 CVE de Boundary →
CVE-2026-13303
HashiCorp Boundary and Boundary Enterprise are vulnerable to a server-side request forgery in the Vault credential store…
8.7
Élevée
CVE-2026-7776
Boundary Community Edition and Boundary Enterprise (“Boundary”) workers are vulnerable to a denial-of-service…
7.5
Élevée
CVE-2024-12289
Boundary Community Edition and Boundary Enterprise (“Boundary”) incorrectly handle HTTP requests during the…
5.9
Moyenne
CVE-2024-1052
Boundary and Boundary Enterprise (“Boundary”) is vulnerable to session hijacking through TLS certificate tampering
8.0
Élevée