Privilege Escalation Vulnerability in HashiCorp Boundary
CVE-2022-36130
9.9CRITICAL
What is CVE-2022-36130?
HashiCorp Boundary versions prior to 0.10.2 exhibit a vulnerability where data integrity checks were inadequately performed. This oversight permitted authorized users to gain access to resources associated with different scopes, leading to a potential privilege escalation scenario. The issue was addressed in version 0.10.2, which rectified the integrity checks, enhancing the security posture of the application.