Lucene search
K

GitLab auth uses full name instead of username as user ID, allowing impersonation

🗓️ 20 Dec 2021 17:56:03Reported by GitHub Advisory DatabaseType 
github
 github
🔗 github.com👁 26 Views

GitLab auth vulnerability allows identity spoofing via full nam

Related
Detection
Refs
ReporterTitlePublishedViews
Family
CVE
CVE-2020-5415
12 Aug 202016:40
cve
Cvelist
CVE-2020-5415 Concourse's GitLab auth allows impersonation
12 Aug 202016:40
cvelist
EUVD
EUVD-2021-2453
7 Oct 202500:30
euvd
NVD
CVE-2020-5415
12 Aug 202017:15
nvd
OSV
BIT-CONCOURSE-2020-5415 Concourse's GitLab auth allows impersonation
6 Mar 202410:51
osv
OSV
CVE-2020-5415
12 Aug 202017:15
osv
OSV
GHSA-627P-RR78-99RJ GitLab auth uses full name instead of username as user ID, allowing impersonation
20 Dec 202117:56
osv
Prion
Spoofing
12 Aug 202017:15
prion
Positive Technologies
PT-2020-18467 · Gitlab +1 · Gitlab +1
12 Aug 202000:00
ptsecurity
Veracode
User Impersonation
13 Aug 202001:50
veracode
Rows per page
Vulners
Node
concourseconcourseRange0.0.01.6.1-0.20200730151558-b00d1c8d8576go
OR
concoursedexRange0.0.06.3.0go
OR
concourseconcourseRange1.6.16.3.0go
OR
concourseconcourseRange<0.0.0-20200730151558-b00d1c8d8576go
OR
concoursedexRange<0.0.0-20200730150203-821b48abfd88go
OR
concoursedexMatch6.4.0go
OR
concourseconcourseMatch6.4.0go

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

22 Jul 2025 16:13Current
8.8High risk
Vulners AI Score8.8
CVSS 26.4
CVSS 3.110
CVSS 310
EPSS0.00257
26