Vulnerability · Published May 13, 2020 · Assigned by pivotal
CVE-2020-5409Concourse Open Redirect in the /sky/login endpoint
High 7.6
In plain English
A high-severity open redirect in Concourse from Pivotal. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 60% of all known vulnerabilities).
Severity (CVSS 3.0)7.6High
Exploit odds (30 days)0.9%top 39.9% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Pivotal Concourse, most versions prior to 6.0.0, allows redirects to untrusted websites in its login flow. A remote unauthenticated attacker could convince a user to click on a link using the OAuth redirect link with an untrusted website and gain access to that user's access token in Concourse. (This issue is similar to, but distinct from, CVE-2018-15798.)
Affected products (as reported)
Weakness: CWE-601 · Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H
References
- https://tanzu.vmware.com/security/cve-2020-5409 x_refsource_CONFIRM