Concourse Open Redirect in the /sky/login endpoint

Description

Pivotal Concourse, most versions prior to 6.0.0, allows redirects to untrusted websites in its login flow. A remote unauthenticated attacker could convince a user to click on a link using the OAuth redirect link with an untrusted website and gain access to that user's access token in Concourse. (This issue is similar to, but distinct from, CVE-2018-15798.)

Scores

EPSS (exploitation in 30 days)

0.91% · top 40% of all CVEs (5 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.6.

Weakness

• CWE-601: Open Redirect (opens in a new tab)All about CWE-601 and its CVEs

Affected products

• Pivotal · Concourse

  • affected unspecified – < 5.2.8
  • affected unspecified – < 5.5.10
  • affected unspecified – < 5.8.1
  • affected unspecified – < 6.0.0

References (1)

• https://tanzu.vmware.com/security/cve-2020-5409 (opens in a new tab)x_refsource_CONFIRMx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2020-5409](https://trackcve.app/badge/CVE-2020-5409.svg)](https://trackcve.app/cve/CVE-2020-5409)

Record last updated 17 Sept 2024, 02:47 UTC.