CVE-2022-31683 — n/a / Concourse

Description (CNA)

Concourse (7.x.y prior to 7.8.3 and 6.x.y prior to 6.7.9) contains an authorization bypass issue. A Concourse user can send a request with body including :team_name=team2 to bypass team scope check to gain access to certain resources belong to any other team.

Affected (CNA)

Vendor / product	Versions
n/a / Concourse	affected Concourse (7.x.y prior to 7.8.3 and 6.x.y prior to 6.7.9)

CWE

No CWE identifiers supplied.

References

https://github.com/concourse/concourse/security/advisories/GHSA-5jp2-vwrj-99rf

ADP enrichment

CVE

No English description supplied.

https://github.com/concourse/concourse/security/advisories/GHSA-5jp2-vwrj-99rf

CISA-ADP

No English description supplied.

No references supplied.