CVE-2024-1052

CVE-2024-1052 is a high-severity session hijacking vulnerability affecting HashiCorp Boundary and Boundary Enterprise. An attacker can exploit this by tampering with TLS certificates, requiring specific privileges to enumerate sessions, obtain a private key, and a valid trust-on-first-use token. This allows them to hijack active sessions and gain unauthorized access to underlying services, with a CVSS score of 8.0 (High) indicating a network-based attack with high impact on confidentiality, integrity, and availability, but requiring high attack complexity and low privileges. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.