Clickjacking Vulnerability in Hashicorp Boundary Software
CVE-2022-36182

6.1MEDIUM

Key Information:

Vendor

Hashicorp
Status
Boundary
Vendor
CVE Published:
27 October 2022

What is CVE-2022-36182?

Hashicorp Boundary v0.8.0 is susceptible to a clickjacking vulnerability, which can enable attackers to intercept login credentials. This security flaw may allow malicious actors to redirect users to harmful sites or compel users to execute undesirable actions within the application. By leveraging this vulnerability, attackers can compromise user accounts and manipulate user behavior, posing significant risks to data integrity and security.

References

https://owasp.org/www-community/attacks/Clickjacking
https://packetstormsecurity.com/files/168654/Hashicorp-Bo...

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.