CVE-2020-5409

Pivotal Concourse, most versions prior to 6.0.0, allows redirects to untrusted websites in its login flow. A remote unauthenticated attacker could convince a user to click on a link using the OAuth redirect link with an untrusted website and gain access to that user's access token in Concourse. (This issue is similar to, but distinct from, CVE-2018-15798.)

• CWE-601
• CWE-601

• https://tanzu.vmware.com/security/cve-2020-5409Vendor Advisory
• https://tanzu.vmware.com/security/cve-2020-5409Vendor Advisory

Published

May 14, 2020

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-5403Reactor Netty HttpServer, versions 0.9.3 and 0.9.4, is expos…7.5
• CVE-2020-5404The HttpClient from Reactor Netty, versions 0.9.x prior to 0…5.9
• CVE-2020-5405Spring Cloud Config, versions 2.2.x prior to 2.2.2, versions…6.5
• CVE-2020-5406VMware Tanzu Application Service for VMs, 2.6.x versions pri…6.5
• CVE-2020-5407Spring Security versions 5.2.x prior to 5.2.4 and 5.3.x prio…8.8
• CVE-2020-5408Spring Security versions 5.3.x prior to 5.3.2, 5.2.x prior t…6.5
• CVE-2020-5410Spring Cloud Config, versions 2.2.x prior to 2.2.3, versions…7.5
• CVE-2020-5411When configured to enable default typing, Jackson contained …8.1
• CVE-2020-5412Spring Cloud Netflix, versions 2.2.x prior to 2.2.4, version…6.5
• CVE-2020-5413Spring Integration framework provides Kryo Codec implementat…9.8
• CVE-2020-5414VMware Tanzu Application Service for VMs (2.7.x versions pri…5.7
• CVE-2020-5415Concourse, versions prior to 6.3.1 and 6.4.1, in installatio…10