github.com/concourse/dex

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

Critical 10.0

CVE-2020-5415

Concourse's GitLab auth allows impersonation

Concourse, versions prior to 6.3.1 and 6.4.1, in installations which use the GitLab auth connector, is vulnerable to identity spoofing by way of configuring a GitLab account with the same full name as another user who is granted access to a Concourse team. Gi…

VMware Tanzu Concourse github.com/concourse/concourse github.com/concourse/dex Go

Aug 12, 2020