CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.9. See the original NVD description below for full technical details.
CVE
CVE-2022-36130
Severity
CRITICAL
CVSS
9.9
EPSS
0.42%
Original NVD Description
HashiCorp Boundary up to 0.10.1 did not properly perform data integrity checks to ensure the resources were associated with the correct scopes, allowing potential privilege escalation for authorized users of another scope. Fixed in Boundary 0.10.2.
Related CVEs
Other vulnerabilities affecting the same vendor(s)