[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$faYWrGP9gc9xLHiWIioO1Jif_X1VK5sL37Z4IJi6Dn9E":3,"g5a-risk:CVE-2020-5415":122},{"success":4,"data":5,"meta":120},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":47,"epssPercentile":27,"epssTimeSeries":48,"severity":49,"affectedProducts":50,"affectedProductsCount":56,"references":57,"referencesCount":68,"weaknesses":69,"weaknessesCount":56,"isActivelyExploited":78,"cisaInfo":27,"otxData":27,"relatedBlogPosts":79,"seoMetadata":80,"configurations":105,"relatedVendorCves":118,"notableEvents":119},"CVE-2020-5415","What is CVE-2020-5415?","Concourse, versions prior to 6.3.1 and 6.4.1, in installations which use the GitLab auth connector, is vulnerable to identity spoofing by way of configuring a GitLab account with the same full name as another user who is granted access to a Concourse team. GitLab groups do not have this vulnerability, so GitLab users may be moved into groups which are then configured in the Concourse team.","Concourse, versions prior to 6.3.1 and 6.4.1, in installations which use the GitLab auth connector, is vulnerable to identity spoofing by way of configuring ...","2020-08-12T17:15:12.633","2020-08-19T14:04:09.907",10,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":30,"CVSSMetricV2":38,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","CHANGED","HIGH","CRITICAL",null,3.9,5.8,[31],{"Source":32,"Type":33,"CVSSData":34,"ExploitabilityScore":28,"ImpactScore":37},"security@pivotal.io","Secondary",{"Version":35,"VectorString":36,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.0","CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:L",6,[39],{"Source":17,"Type":18,"CVSSData":40,"BaseSeverity":45,"ExploitabilityScore":12,"ImpactScore":46,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":41,"VectorString":42,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":43,"IntegrityImpact":43,"AvailabilityImpact":23,"BaseScore":44,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:N","PARTIAL",6.4,"MEDIUM",4.9,0.01217,[47,47,47,47,47,47,47],"Critical",[51],{"vendor":52,"product":53,"version":54,"criteria":55,"vulnerable":4},"pivotal_software","concourse","*","cpe:2.3:a:pivotal_software:concourse:*:*:*:*:*:*:*:*",1,[58,64],{"url":59,"source":60,"tags":61},"https:\u002F\u002Fgithub.com\u002Fconcourse\u002Fconcourse\u002Fsecurity\u002Fadvisories\u002FGHSA-627p-rr78-99rj","GitHub",[62,63],"Patch","Third Party Advisory",{"url":65,"source":66,"tags":67},"https:\u002F\u002Ftanzu.vmware.com\u002Fsecurity\u002Fcve-2020-5415","Vmware",[63],2,[70],{"id":71,"name":72,"description":73,"extendedDescription":74,"status":75,"abstraction":76,"structure":77},"CWE-290","Authentication Bypass by Spoofing","This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.","","Incomplete","Base","Simple",false,[],{"title":81,"metaDescription":82,"keywords":83,"canonicalUrl":84,"structuredData":85},"What is CVE-2020-5415? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-5415, a critical severity cyber security vulnerability from 2020. Concourse, versions prior to 6.3.1 and 6.4.1, in install...","CVE-2020-5415, CVE-2020-5415 vulnerability, CVE-2020-5415 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, pivotal_software security, concourse vulnerability","\u002Fwhat-is\u002Fcve-2020-5415",{"@context":86,"@type":87,"headline":81,"description":82,"datePublished":10,"dateModified":11,"author":88,"publisher":92,"about":96,"mainEntityOfPage":100,"articleSection":103,"keywords":104},"https:\u002F\u002Fschema.org","TechArticle",{"@type":89,"name":90,"url":91},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":89,"name":90,"url":91,"logo":93},{"@type":94,"url":95},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":97,"name":6,"description":98,"additionalType":99},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":101,"@id":102},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-5415","Cybersecurity","CVE-2020-5415, CVE-2020-5415 vulnerability, CVE-2020-5415 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[106],{"Operator":27,"Negate":27,"Nodes":107},[108],{"Operator":109,"Negate":27,"CPEMatch":110},"OR",[111,114],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":112,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":113,"VersionEndIncluding":27},"3D808A55-A17A-4DB6-BBA0-5D7166BD2755","6.3.1",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":115,"VersionStartExcluding":27,"VersionStartIncluding":116,"VersionEndExcluding":117,"VersionEndIncluding":27},"6D28012E-8883-447B-92A0-478ABCF19AF8","6.4.0","6.4.1",[],[],{"lastModified":11,"cacheTime":121,"version":41},1792450347134,{"score":123,"band":124,"action":125,"scoredAt":126},54,"Medium","Plan remediation","2026-10-16T06:49:10.861632+00:00"]