CyberRota Analysis
AI analysis pending.
CVE
CVE-2018-15798
Severity
HIGH
CVSS
7.6
EPSS
1.15%
Original NVD Description
Pivotal Concourse Release, versions 4.x prior to 4.2.2, login flow allows redirects to untrusted websites. A remote unauthenticated attacker could convince a user to click on a link using the oAuth redirect link with an untrusted website and gain access to that user's access token in Concourse.