Privilege Escalation Vulnerability in HashiCorp Boundary

CVE-2022-36130

Summary

HashiCorp Boundary versions prior to 0.10.2 exhibit a vulnerability where data integrity checks were inadequately performed. This oversight permitted authorized users to gain access to resources associated with different scopes, leading to a potential privilege escalation scenario. The issue was addressed in version 0.10.2, which rectified the integrity checks, enhancing the security posture of the application.

References