Hashicorp Boundary vulnerable to clickjacking

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2022-36182 · ADVISORY
• hashicorp/boundary · PACKAGE
• owasp.org/www-community/attacks/Clickjacking · WEB
• packetstormsecurity.com/files/168654/Hashicorp-Boundary-Clickjacking.html · WEB

Lỗ hổng khác của github.com/hashicorp/boundary

• CVE-2026-7776CAO 7.5Boundary Community Edition and Boundary Enterprise (“Boundary”) workers are vulnerable to a denial-of-service condition during node enrollme…
• CVE-2024-12289TRUNG BÌNH 5.9Boundary Community Edition and Boundary Enterprise (“Boundary”) incorrectly handle HTTP requests during the initialization of the Boundary c…
• CVE-2024-1052CAO 8.0Boundary and Boundary Enterprise (“Boundary”) is vulnerable to session hijacking through TLS certificate tampering. An attacker with privile…
• CVE-2023-0690CAO 7.1HashiCorp Boundary from 0.10.0 through 0.11.2 contain an issue where when using a PKI-based worker with a Key Management Service (KMS) defin…