CVE-2022-36130

HashiCorp Boundary up to 0.10.1 did not properly perform data integrity checks to ensure the resources were associated with the correct scopes, allowi...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

HashiCorp Boundary up to 0.10.1 did not properly perform data integrity checks to ensure the resources were associated with the correct scopes, allowing potential privilege escalation for authorized users of another scope. Fixed in Boundary 0.10.2.

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV

参照URL

advisory github.com
advisory nvd.nist.gov
web discuss.hashicorp.com
web discuss.hashicorp.com