[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fbMtNDfclW08fZaTS4yYW2Vn0i3L4MIkpEAPk4rde_Co":3,"g5a-risk:CVE-2022-36130":100},{"success":4,"data":5,"meta":97},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":30,"epssPercentile":27,"epssTimeSeries":31,"severity":32,"affectedProducts":33,"affectedProductsCount":39,"references":40,"referencesCount":49,"weaknesses":50,"weaknessesCount":39,"isActivelyExploited":59,"cisaInfo":27,"otxData":27,"relatedBlogPosts":60,"seoMetadata":61,"configurations":86,"relatedVendorCves":95,"notableEvents":96},"CVE-2022-36130","What is CVE-2022-36130?","HashiCorp Boundary up to 0.10.1 did not properly perform data integrity checks to ensure the resources were associated with the correct scopes, allowing potential privilege escalation for authorized users of another scope. Fixed in Boundary 0.10.2.","HashiCorp Boundary up to 0.10.1 did not properly perform data integrity checks to ensure the resources were associated with the correct scopes, allowing pote...","2022-09-01T02:15:07.98","2022-09-09T14:17:42.07",9.9,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":27,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","CHANGED","HIGH","CRITICAL",null,3.1,6,0.00472,[30,30,30,30,30,30,30],"Critical",[34],{"vendor":35,"product":36,"version":37,"criteria":38,"vulnerable":4},"hashicorp","boundary","*","cpe:2.3:a:hashicorp:boundary:*:*:*:*:*:*:*:*",1,[41,46],{"url":42,"source":43,"tags":44},"https:\u002F\u002Fdiscuss.hashicorp.com","Hashicorp",[45],"Vendor Advisory",{"url":47,"source":43,"tags":48},"https:\u002F\u002Fdiscuss.hashicorp.com\u002Ft\u002Fhcsec-2022017-boundary-allowed-access-to-host-sets-and-credential-sources-for-authorized-users-of-another-scope\u002F43493",[45],2,[51],{"id":52,"name":53,"description":54,"extendedDescription":55,"status":56,"abstraction":57,"structure":58},"CWE-345","Insufficient Verification of Data Authenticity","The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.","","Draft","Class","Simple",false,[],{"title":62,"metaDescription":63,"keywords":64,"canonicalUrl":65,"structuredData":66},"What is CVE-2022-36130? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-36130, a critical severity cyber security vulnerability from 2022. HashiCorp Boundary up to 0.10.1 did not properly perfor...","CVE-2022-36130, CVE-2022-36130 vulnerability, CVE-2022-36130 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, hashicorp security, boundary vulnerability","\u002Fwhat-is\u002Fcve-2022-36130",{"@context":67,"@type":68,"headline":62,"description":63,"datePublished":10,"dateModified":11,"author":69,"publisher":73,"about":77,"mainEntityOfPage":81,"articleSection":84,"keywords":85},"https:\u002F\u002Fschema.org","TechArticle",{"@type":70,"name":71,"url":72},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":70,"name":71,"url":72,"logo":74},{"@type":75,"url":76},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":78,"name":6,"description":79,"additionalType":80},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":82,"@id":83},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-36130","Cybersecurity","CVE-2022-36130, CVE-2022-36130 vulnerability, CVE-2022-36130 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[87],{"Operator":27,"Negate":27,"Nodes":88},[89],{"Operator":90,"Negate":27,"CPEMatch":91},"OR",[92],{"Vulnerable":4,"Criteria":38,"MatchCriteriaID":93,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":94,"VersionEndIncluding":27},"ACA99134-C390-4EEA-BA71-32CD5550C415","0.10.2",[],[],{"lastModified":11,"cacheTime":98,"version":99},1792439822517,"2.0",{"score":101,"band":102,"action":103,"scoredAt":104},55,"Medium","Plan remediation","2026-10-16T06:55:37.094494+00:00"]