Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 10:04:57 +0000 EUVD-2026-1657 https://cve.radiocsirt.org/vuln/euvd-2026-1657 EUVD-2026-1657 https://cve.radiocsirt.org/vuln/euvd-2026-1657 fkie_cve-2024-1052 https://cve.radiocsirt.org/vuln/fkie_cve-2024-1052 <p>Boundary and Boundary Enterprise (“Boundary”) is vulnerable to session hijacking through TLS certificate tampering. An attacker with privileges to enumerate active or pending sessions, obtain a private key pertaining to a session, and obtain a valid trust on first use (TOFU) token may craft a TLS certificate to hijack an active session and gain access to the underlying service or application.</p> <p>Boundary and Boundary Enterprise (“Boundary”) is vulnerable to session hijacking through TLS certificate tampering. An attacker with privileges to enumerate active or pending sessions, obtain a private key pertaining to a session, and obtain a valid trust on first use (TOFU) token may craft a TLS certificate to hijack an active session and gain access to the underlying service or application.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-1052 GHSA-vh73-q3rw-qx7w — Boundary vulnerable to session hijacking through TLS certificate tampering https://cve.radiocsirt.org/vuln/ghsa-vh73-q3rw-qx7w <p><strong>Affected:</strong> Go: github.com/hashicorp/boundary</p> <p>Boundary and Boundary Enterprise (“Boundary”) is vulnerable to session hijacking through TLS certificate tampering. An attacker with privileges to enumerate active or pending sessions, obtain a private key pertaining to a session, and obtain a valid trust on first use (TOFU) token may craft a TLS certificate to hijack an active session and gain access to the underlying service or application.</p> <p><strong>Affected:</strong> Go: github.com/hashicorp/boundary</p> <p>Boundary and Boundary Enterprise (“Boundary”) is vulnerable to session hijacking through TLS certificate tampering. An attacker with privileges to enumerate active or pending sessions, obtain a private key pertaining to a session, and obtain a valid trust on first use (TOFU) token may craft a TLS certificate to hijack an active session and gain access to the underlying service or application.</p> https://cve.radiocsirt.org/vuln/ghsa-vh73-q3rw-qx7w gsd-2024-1052 https://cve.radiocsirt.org/vuln/gsd-2024-1052 gsd-2024-1052 https://cve.radiocsirt.org/vuln/gsd-2024-1052