common

Mar 7, 2024 GO-2024-2532

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

Dec 12, 2023 GO-2024-2532

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

Oct 31, 2023 GO-2024-2532

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

Oct 17, 2023 GO-2024-2532

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

Oct 6, 2023 GO-2024-2532

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

Jul 14, 2023 GO-2024-2532

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

Jun 9, 2023 GO-2024-2532

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

Changes in this version

+ func IsManagedWorker(worker *server.Worker) bool

type WorkerList

+ func SeparateManagedWorkers(workers WorkerList) (managedWorkers, nonManagedWorkers WorkerList)

Apr 4, 2023 GO-2024-2532

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

Mar 9, 2023 GO-2024-2532

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

Feb 8, 2023 GO-2024-2532

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

Changes in this version

+ const DataPlaneProxyAlpnValue

+ const ManagedWorkerTag

+ type WorkerList []*server.Worker

+ func (w WorkerList) Addresses() []string

+ func (w WorkerList) Filtered(eval *bexpr.Evaluator) (WorkerList, error)

+ func (w WorkerList) PublicIds() []string

+ func (w WorkerList) SupportsFeature(f version.Feature) WorkerList

+ func (w WorkerList) WorkerInfos() []*pb.WorkerInfo

Dec 8, 2022 GO-2023-1898 +1 more

  GO-2023-1898: HashiCorp Boundary Workers Store Rotated Credentials in Plaintext Even When Key Management Service Configured in github.com/hashicorp/boundary

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

Nov 23, 2022 GO-2023-1898 +1 more

  GO-2023-1898: HashiCorp Boundary Workers Store Rotated Credentials in Plaintext Even When Key Management Service Configured in github.com/hashicorp/boundary

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

Sep 27, 2022 GO-2023-1898 +1 more

  GO-2023-1898: HashiCorp Boundary Workers Store Rotated Credentials in Plaintext Even When Key Management Service Configured in github.com/hashicorp/boundary

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

Sep 14, 2022 GO-2023-1898 +1 more

  GO-2023-1898: HashiCorp Boundary Workers Store Rotated Credentials in Plaintext Even When Key Management Service Configured in github.com/hashicorp/boundary

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

Sep 12, 2022 GO-2023-1898 +1 more

  GO-2023-1898: HashiCorp Boundary Workers Store Rotated Credentials in Plaintext Even When Key Management Service Configured in github.com/hashicorp/boundary

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

Aug 30, 2022 GO-2023-1898 +1 more

  GO-2023-1898: HashiCorp Boundary Workers Store Rotated Credentials in Plaintext Even When Key Management Service Configured in github.com/hashicorp/boundary

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

Aug 22, 2022 GO-2023-1898 +1 more

  GO-2023-1898: HashiCorp Boundary Workers Store Rotated Credentials in Plaintext Even When Key Management Service Configured in github.com/hashicorp/boundary

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

Aug 11, 2022 GO-2023-1898 +1 more

  GO-2023-1898: HashiCorp Boundary Workers Store Rotated Credentials in Plaintext Even When Key Management Service Configured in github.com/hashicorp/boundary

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

Aug 9, 2022 GO-2023-1898 +1 more

  GO-2023-1898: HashiCorp Boundary Workers Store Rotated Credentials in Plaintext Even When Key Management Service Configured in github.com/hashicorp/boundary

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

Changes in this version

+ const ReverseGrpcConnectionAlpnValue

+ func NewEventingListener(ctx context.Context, baseLn net.Listener) (net.Listener, error)

Jul 6, 2022 GO-2024-2532

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

Jun 20, 2022 GO-2024-2532

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

Changes in this version

+ func ClientIpFromRequest(ctx context.Context, listenerCfg *listenerutil.ListenerConfig, r *http.Request) (string, error)

+ func GeneratedTraceId(ctx context.Context) string

+ func WrapWithEventsHandler(h http.Handler, e *event.Eventer, kms *kms.Kms, ...) (http.Handler, error)

+ func WrapWithOptionals(ctx context.Context, with *writerWrapper, wrap http.ResponseWriter) (http.ResponseWriter, error)