Go/github.com/hashicorp/boundary CVE-2023-0690: unknown, EPSS 0.44%
HashiCorp Boundary Workers Store Rotated Credentials in Plaintext Even When Key Management Service Configured in github.com/hashicorp/boundary
Action: Upgrade github.com/hashicorp/boundary to 0.12.0 or later.
go get github.com/hashicorp/boundary@v0.12.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.10.0 | 0.12.0 | - |
Fixed versions
| 0.12.0 |
Sources
- osv: GO-2023-1898
- https://github.com/advisories/GHSA-9vrm-v9xv-x3xr
- https://nvd.nist.gov/vuln/detail/CVE-2023-0690
- https://discuss.hashicorp.com/t/hcsec-2023-03-boundary-workers-store-rotated-credentials-in-plaintext-even-when-key-management-service-configured/49907
CVE-2023-0690 · published · modified · JSON