CVE-2020-5415: pivotal_software concourse Authentication Bypass by Spoofing
Vulnerability summary
CVE-2020-5415 is a critical (CVSS 10.0) Authentication Bypass by Spoofing vulnerability in pivotal_software concourse. EPSS estimates a 1.22% chance of exploitation in the next 30 days, higher than 68.1% of scored vulnerabilities.
Timeline
- 12-08-2020PublishedVulnerability first disclosed.
- 16-09-2024Last modifiedVulnerability information updated.
Description
Concourse, versions prior to 6.3.1 and 6.4.1, in installations which use the GitLab auth connector, is vulnerable to identity spoofing by way of configuring a GitLab account with the same full name as another user who is granted access to a Concourse team. GitLab groups do not have this vulnerability, so GitLab users may be moved into groups which are then configured in the Concourse team.
CVSS metrics
5 scores · 3 sources · 3 versions- NVDNIST10.0CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:NDiffers
- NVDNIST10.0CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L
EPSS trend
Probability
1.22%
Chance of exploitation in the next 30 days
Percentile
68%
Versus all other CVEs
30-day change
0.00 pp
From 1.22% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Github.com/concourse2 products
- concourse≥ 6.4.0, < 6.4.1 | ≥ 1.6.1, < 6.3.1 | < 0.0.0-20200730151558-b00d1c8d8576 | ≥ 0.0.0, < 1.6.1-0.20200730151558-b00d1c8d8576
- dex≥ 6.4.0, < 6.4.1 | ≥ 0.0.0, < 6.3.1 | < 0.0.0-20200730150203-821b48abfd88
Pivotal_software1 product
- concourse< 6.3.1 | ≥ 6.4.0, < 6.4.1
Vmware tanzu1 product
- concourse≥ 6.4, < 6.4.1 | ≥ 6.3, < 6.3.1
3 vendors · 4 products
References
3 links- github.com/concourse/concourse/security/advisories/GHSA-627p-rr78-99rjX Refsource CONFIRMWEBPatchThird Party Advisory
