CVE-2020-5415 - CVE House
Back to Database
Status published Critical CVE-2020-5415

Concourse's GitLab auth allows impersonation

Vulnerability Description

Concourse, versions prior to 6.3.1 and 6.4.1, in installations which use the GitLab auth connector, is vulnerable to identity spoofing by way of configuring a GitLab account with the same full name as another user who is granted access to a Concourse team. GitLab groups do not have this vulnerability, so GitLab users may be moved into groups which are then configured in the Concourse team.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-5415

Credits & Attribution

No credits recorded in the NVD database.

References

More from VMware Tanzu

View All →
CVE-2020-5426
Scheduler for TAS can transmit privileged UAA token in plaintext
High 8.6
CVE-2020-5425
User Impersonation possible in Tanzu SSO
High 7.5
CVE-2020-5419
RabbitMQ arbitrary code execution using local binary planting
Medium 6.7
CVE-2020-5414
App Autoscaler logs credentials
Medium 5.7
CVE-2020-5396
JMX Insecure Default Configuration in GemFire
High 8.8

Affected Vendor

VMware Tanzu

View all reports →

Affected Software

Concourse
Vulnerable Versions:
6.4, 6.3

Timeline

Official Publish: August 12th, 2020
Last Modified: September 16th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L

Weaknesses (CWE)

CWE-290

MITRE ATT&CK TTPs

T1557 Adversary-in-the-Middle
Collection
T1078 Valid Accounts
Persistence
T1550 Use Alternate Authentication Material
Defense Evasion
T1021 Remote Services
Lateral Movement
T1190 Exploit Public-Facing Application
Initial Access