Affected by GO-2023-1898 and 1 other vulnerabilities

GO-2023-1898: HashiCorp Boundary Workers Store Rotated Credentials in Plaintext Even When Key Management Service Configured in github.com/hashicorp/boundary

GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

internal/

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Repository

github.com/hashicorp/boundary

Links

Open Source Insights

Directories ¶

Path	Synopsis
api
genapi
auth
oidc
oidc/request
oidc/store
password
password/store
store
authtoken Package authtoken provides an authtoken with an encrypted value and an associated expiration time.	Package authtoken provides an authtoken with an encrypted value and an associated expiration time.
store
boundary Package boundary contains global interfaces and other definitions that define the Boundary domain.	Package boundary contains global interfaces and other definitions that define the Boundary domain.
cmd
base
base/internal/docker
base/internal/metric Package metric provides functions to initialize a prometheus metric detailing build info	Package metric provides functions to initialize a prometheus metric detailing build info
base/logging
commands/accountscmd Code generated by "make cli"; DO NOT EDIT.	Code generated by "make cli"; DO NOT EDIT.
commands/authenticate
commands/authmethodscmd Code generated by "make cli"; DO NOT EDIT.	Code generated by "make cli"; DO NOT EDIT.
commands/authtokenscmd Code generated by "make cli"; DO NOT EDIT.	Code generated by "make cli"; DO NOT EDIT.
commands/config
commands/connect
commands/credentiallibrariescmd Code generated by "make cli"; DO NOT EDIT.	Code generated by "make cli"; DO NOT EDIT.
commands/credentialscmd Code generated by "make cli"; DO NOT EDIT.	Code generated by "make cli"; DO NOT EDIT.
commands/credentialstorescmd Code generated by "make cli"; DO NOT EDIT.	Code generated by "make cli"; DO NOT EDIT.
commands/database
commands/dev
commands/groupscmd Code generated by "make cli"; DO NOT EDIT.	Code generated by "make cli"; DO NOT EDIT.
commands/hostcatalogscmd Code generated by "make cli"; DO NOT EDIT.	Code generated by "make cli"; DO NOT EDIT.
commands/hostscmd Code generated by "make cli"; DO NOT EDIT.	Code generated by "make cli"; DO NOT EDIT.
commands/hostsetscmd Code generated by "make cli"; DO NOT EDIT.	Code generated by "make cli"; DO NOT EDIT.
commands/logout
commands/managedgroupscmd Code generated by "make cli"; DO NOT EDIT.	Code generated by "make cli"; DO NOT EDIT.
commands/rolescmd Code generated by "make cli"; DO NOT EDIT.	Code generated by "make cli"; DO NOT EDIT.
commands/scopescmd Code generated by "make cli"; DO NOT EDIT.	Code generated by "make cli"; DO NOT EDIT.
commands/server
commands/sessionscmd Code generated by "make cli"; DO NOT EDIT.	Code generated by "make cli"; DO NOT EDIT.
commands/targetscmd Code generated by "make cli"; DO NOT EDIT.	Code generated by "make cli"; DO NOT EDIT.
commands/userscmd Code generated by "make cli"; DO NOT EDIT.	Code generated by "make cli"; DO NOT EDIT.
commands/version
commands/workerscmd Code generated by "make cli"; DO NOT EDIT.	Code generated by "make cli"; DO NOT EDIT.
common
config
gencli
ops Package ops encapsulates the lifecycle of Boundary's ops-purpose listeners and servers: Creating, setting them up, starting and shutdown.	Package ops encapsulates the lifecycle of Boundary's ops-purpose listeners and servers: Creating, setting them up, starting and shutdown.
credential Package credential defines interfaces shared by other packages that manage credentials for Boundary sessions.	Package credential defines interfaces shared by other packages that manage credentials for Boundary sessions.
static Package static implements a credential store for static credentials.	Package static implements a credential store for static credentials.
static/store
store
vault Package vault provides access to credentials retrieved from a Vault server.	Package vault provides access to credentials retrieved from a Vault server.
vault/internal/sshprivatekey Package sshprivatekey provides access to the username and ssh private key stored in a Vault secret.	Package sshprivatekey provides access to the username and ssh private key stored in a Vault secret.
vault/internal/usernamepassword Package usernamepassword provides access to the username and password stored in a Vault secret.	Package usernamepassword provides access to the username and password stored in a Vault secret.
vault/store
daemon
cluster/handlers
common
controller
controller/auth
controller/common Package common contains types and helper functions that are used across the different packages under internal/server/controller.	Package common contains types and helper functions that are used across the different packages under internal/server/controller.
controller/common/scopeids
controller/handlers
controller/handlers/accounts
controller/handlers/authmethods
controller/handlers/authtokens
controller/handlers/credentiallibraries
controller/handlers/credentials
controller/handlers/credentialstores
controller/handlers/groups
controller/handlers/health
controller/handlers/host_catalogs
controller/handlers/host_sets
controller/handlers/hosts
controller/handlers/managed_groups
controller/handlers/roles
controller/handlers/scopes
controller/handlers/sessions
controller/handlers/targets
controller/handlers/targets/tcp
controller/handlers/users
controller/handlers/workers
controller/internal/metric Package metric provides functions to initialize the controller specific collectors and hooks to measure metrics and update the relevant collectors.	Package metric provides functions to initialize the controller specific collectors and hooks to measure metrics and update the relevant collectors.
worker
worker/common Package common contains types and helper functions that are used across the different packages under internal/server/worker.	Package common contains types and helper functions that are used across the different packages under internal/server/worker.
worker/internal/metric Package metric provides functions to initialize the worker specific collectors and hooks to measure metrics and update the relevant collectors.	Package metric provides functions to initialize the worker specific collectors and hooks to measure metrics and update the relevant collectors.
worker/proxy Package proxy contains a collection of proxy handlers for the worker to call once a connection has been authorized.	Package proxy contains a collection of proxy handlers for the worker to call once a connection has been authorized.
worker/proxy/tcp
worker/session
db
assert Package dbassert provides a set of assertions for testing the boundary database applications.	Package dbassert provides a set of assertions for testing the boundary database applications.
common common package contains functions from internal/db which need to be shared commonly with other packages that have a cyclic dependency on internal/db like internal/oplog.	common package contains functions from internal/db which need to be shared commonly with other packages that have a cyclic dependency on internal/db like internal/oplog.
db_test Package db_test provides some helper funcs for testing db integrations	Package db_test provides some helper funcs for testing db integrations
sanitize Package sanitize contains a set of functions that sanitizes input received from external systems before being persisted in the database.	Package sanitize contains a set of functions that sanitizes input received from external systems before being persisted in the database.
schema Package schema is used to apply sql migrations to modify the state of a database instance.	Package schema is used to apply sql migrations to modify the state of a database instance.
schema/internal/edition Package edition provides internal structs for the schema package for defining and organizing database migration editions.	Package edition provides internal structs for the schema package for defining and organizing database migration editions.
schema/internal/log Package log provides internal structs and options for the schema package for tracking logs generated when applying migrations.	Package log provides internal structs and options for the schema package for tracking logs generated when applying migrations.
schema/internal/postgres Package postgres provides an implementation of the schema.driver interface for a PostgreSQL database.	Package postgres provides an implementation of the schema.driver interface for a PostgreSQL database.
schema/internal/provider Package provider provides an iterator for iterating over all of the migration statements that need to be applied.	Package provider provides an iterator for iterating over all of the migration statements that need to be applied.
schema/migration
schema/migrations Package migrations contains the base sql statements needed to bootstrap the migration process.	Package migrations contains the base sql statements needed to bootstrap the migration process.
schema/migrations/oss Package oss is used to embed the sql statements for the oss edition and registering the edition for the schema.Manager.	Package oss is used to embed the sql statements for the oss edition and registering the edition for the schema.Manager.
schema/migrations/oss/internal/hook46001 Package hook46001 implements the hook CheckFunc & RepairFunc definitions for CVE-2022-36130.	Package hook46001 implements the hook CheckFunc & RepairFunc definitions for CVE-2022-36130.
sentinel Package sentinel allows for the use of Unicode non-characters to distinguish between Boundary defined sentinels and values provided by external systems.	Package sentinel allows for the use of Unicode non-characters to distinguish between Boundary defined sentinels and values provided by external systems.
timestamp
errors
filter
gen
controller/api
controller/api/services Package services is a reverse proxy.	Package services is a reverse proxy.
controller/auth
controller/ops/services Package services is a reverse proxy.	Package services is a reverse proxy.
controller/servers
controller/servers/services
controller/tokens
errors
testing/attribute Package attribute is a reverse proxy.	Package attribute is a reverse proxy.
testing/event Package event is a reverse proxy.	Package event is a reverse proxy.
testing/interceptor
testing/protooptions Package protooptions is a reverse proxy.	Package protooptions is a reverse proxy.
host
plugin Package plugin provides a plugin host catalog, and plugin host set resource which are used to interact with a host plugin as well as a repository to perform CRUDL and custom actions on these resource types.	Package plugin provides a plugin host catalog, and plugin host set resource which are used to interact with a host plugin as well as a repository to perform CRUDL and custom actions on these resource types.
plugin/store
static Package static provides a host, a host catalog, and a host set suitable for hosts with a static address.	Package static provides a host, a host catalog, and a host set suitable for hosts with a static address.
static/store
store
iam iam package is for identity access management of boundary.	iam package is for identity access management of boundary.
store
intglobals
kms
store
libs
crypto
endpoint
patchstruct
observability
event
oplog Package oplog is a package for writing operational log (oplog) entries for the purpose of replication and verification of the data stored in the Boundary RDBMS.	Package oplog is a package for writing operational log (oplog) entries for the purpose of replication and verification of the data stored in the Boundary RDBMS.
oplog_test Package oplog_test provides some gorm helper funcs for testing oplog database integrations	Package oplog_test provides some gorm helper funcs for testing oplog database integrations
store Package store provides storage types/behavior for the oplog	Package store provides storage types/behavior for the oplog
perms Package perms provides the boundary permissions engine using grants which are tied to IAM Roles within a Scope.	Package perms provides the boundary permissions engine using grants which are tied to IAM Roles within a Scope.
plugin Package plugin contains other packages related to the different plugin types and any helpers related to working with non type specific plugins.	Package plugin contains other packages related to the different plugin types and any helpers related to working with non type specific plugins.
host Package host provides a plugin type used to interface with boundary's host related resources.	Package host provides a plugin type used to interface with boundary's host related resources.
host/store
store
proxy
requests
scheduler Package scheduler allows callers to register recurring jobs on the controller.	Package scheduler allows callers to register recurring jobs on the controller.
job Package job provides a Job and a Run struct suitable for persisting to the repository.	Package job provides a Job and a Run struct suitable for persisting to the repository.
job/store
server
job
store
session
target
store
targettest Package targettest provides a test target subtype for use by the target package.	Package targettest provides a test target subtype for use by the target package.
targettest/store
tcp Package tcp provides a Target subtype for a TCP Target.	Package tcp provides a Target subtype for a TCP Target.
tcp/store
tests
api
cluster
helper
types
action
resource
scope
subtypes Package subtypes provides helpers to work with boundary resource subtypes.	Package subtypes provides helpers to work with boundary resource subtypes.
ui
website
permstable

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL