CVE-2022-36182

6.1MEDIUM

Key Information

Vendor: Hashicorp
Status: Boundary
Vendor: CVE Published:; 27 October 2022

Summary

Hashicorp Boundary v0.8.0 is vulnerable to Clickjacking which allow for the interception of login credentials, re-direction of users to malicious sites, or causing users to perform malicious actions on the site.

CVSS V3.1

Score:

6.1

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Changed

Timeline

Vulnerability published.
Oct 27, 2022
Vulnerability Reserved.
Jul 18, 2022

Collectors

NVD DatabaseMitre Database