{"id":"CVE-2024-1052","aliases":["EUVD-2024-0734","GHSA-vh73-q3rw-qx7w","GO-2024-2532"],"status":"published","title":"Boundary Vulnerable to Session Hijacking Through TLS Certificate Tampering","description":"Boundary and Boundary Enterprise (“Boundary”) is vulnerable to session hijacking through TLS certificate tampering. An attacker with privileges to enumerate active or pending sessions, obtain a private key pertaining to a session, and obtain a valid trust on first use (TOFU) token may craft a TLS certificate to hijack an active session and gain access to the underlying service or application.","severity":{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00294,"percentile":0.22222,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-295"],"published":"2024-02-05T20:43:53Z","modified":"2026-10-28T02:31:09Z","fixes":[{"ecosystem":"Go","package":"github.com/hashicorp/boundary","fixed_in":["0.15.0"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"Go","package":"github.com/hashicorp/boundary","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.8.0"},{"fixed":"0.15.0"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/hashicorp/boundary","ranges":[{"type":"SEMVER","events":[{"introduced":"0.8.0"},{"fixed":"0.15.0"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/hashicorp/boundary","ranges":[{"type":"SEMVER","events":[{"introduced":"0.8.0"},{"fixed":"0.15.0"}]}]}],"products":[{"vendor":"hashicorp","product":"boundary"},{"vendor":"hashicorp","product":"boundary enterprise"},{"vendor":"hashicorp","product":"boundary_enterprise"}],"references":[{"url":"https://discuss.hashicorp.com/t/hcsec-2024-02-boundary-vulnerable-to-session-hijacking-through-tls-certificate-tampering/62458","tags":["x_transferred","Vendor Advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-1052","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-vh73-q3rw-qx7w","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/1xxx/CVE-2024-1052.json","tags":["advisory"]},{"url":"https://github.com/hashicorp/boundary","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2024-1052","title":"Boundary Vulnerable to Session Hijacking Through TLS Certificate Tampering","description":"Boundary and Boundary Enterprise (“Boundary”) is vulnerable to session hijacking through TLS certificate tampering. An attacker with privileges to enumerate active or pending sessions, obtain a private key pertaining to a session, and obtain a valid trust on first use (TOFU) token may craft a TLS certificate to hijack an active session and gain access to the underlying service or application.","status":"published","published":"2024-02-05T20:43:53.939Z","modified":"2024-08-01T18:26:30.42Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-295"],"updated_at":"2026-11-02T14:34:18.259965Z"}],"euvd":[{"id":"EUVD-2024-0734","description":"Boundary and Boundary Enterprise (“Boundary”) is vulnerable to session hijacking through TLS certificate tampering. An attacker with privileges to enumerate active or pending sessions, obtain a private key pertaining to a session, and obtain a valid trust on first use (TOFU) token may craft a TLS certificate to hijack an active session and gain access to the underlying service or application.","status":"published","published":"2024-02-05T20:43:53Z","modified":"2024-08-01T18:26:30Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T03:50:41.523881Z"}],"ghsa":[{"id":"GHSA-vh73-q3rw-qx7w","title":"Boundary vulnerable to session hijacking through TLS certificate tampering","description":"Boundary and Boundary Enterprise (“Boundary”) is vulnerable to session hijacking through TLS certificate tampering. An attacker with privileges to enumerate active or pending sessions, obtain a private key pertaining to a session, and obtain a valid trust on first use (TOFU) token may craft a TLS certificate to hijack an active session and gain access to the underlying service or application.","status":"published","published":"2024-02-05T21:30:31Z","modified":"2024-02-05T23:06:57Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-295"],"updated_at":"2026-11-02T14:37:36.076201Z"}],"nvd":[{"id":"CVE-2024-1052","description":"Boundary and Boundary Enterprise (“Boundary”) is vulnerable to session hijacking through TLS certificate tampering. An attacker with privileges to enumerate active or pending sessions, obtain a private key pertaining to a session, and obtain a valid trust on first use (TOFU) token may craft a TLS certificate to hijack an active session and gain access to the underlying service or application.","status":"published","published":"2024-02-05T21:15:11.64Z","modified":"2026-06-17T07:03:19.907Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-295"],"updated_at":"2026-11-02T14:09:34.891666Z"}],"osv":[{"id":"CVE-2024-1052","title":"Boundary Vulnerable to Session Hijacking Through TLS Certificate Tampering","description":"Boundary and Boundary Enterprise (“Boundary”) is vulnerable to session hijacking through TLS certificate tampering. An attacker with privileges to enumerate active or pending sessions, obtain a private key pertaining to a session, and obtain a valid trust on first use (TOFU) token may craft a TLS certificate to hijack an active session and gain access to the underlying service or application.","status":"published","published":"2024-02-05T20:43:53.939Z","modified":"2026-10-28T02:31:09.489145119Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-295"],"updated_at":"2026-11-02T15:44:37.180532Z"},{"id":"GHSA-vh73-q3rw-qx7w","title":"Boundary vulnerable to session hijacking through TLS certificate tampering","description":"Boundary and Boundary Enterprise (“Boundary”) is vulnerable to session hijacking through TLS certificate tampering. An attacker with privileges to enumerate active or pending sessions, obtain a private key pertaining to a session, and obtain a valid trust on first use (TOFU) token may craft a TLS certificate to hijack an active session and gain access to the underlying service or application.","status":"published","published":"2024-02-05T21:30:31Z","modified":"2024-06-28T15:58:33.006056Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-295"],"updated_at":"2026-11-02T15:46:57.348035Z"},{"id":"GO-2024-2532","title":"Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary","description":"Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary","status":"published","published":"2024-06-28T15:28:53Z","modified":"2026-03-03T04:55:10.866277Z","updated_at":"2026-11-02T15:47:01.185262Z"}]}}