CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.0. See the original NVD description below for full technical details.
CVE
CVE-2023-0690
Severity
MEDIUM
CVSS
5
EPSS
0.44%
Original NVD Description
HashiCorp Boundary from 0.10.0 through 0.11.2 contain an issue where when using a PKI-based worker with a Key Management Service (KMS) defined in the configuration file, new credentials created after an automatic rotation may not have been encrypted via the intended KMS. This would result in the credentials being stored in plaintext on the Boundary PKI worker’s disk. This issue is fixed in version 0.12.0.
Related CVEs
Other vulnerabilities affecting the same vendor(s)