CVE-2020-5425

CVE-2020-5425 affects VMware Tanzu SSO: all versions prior to 1.11.3, 1.12.x prior to 1.12.4, and 1.13.x prior to 1.13.1 are vulnerable to a user-impersonation attack. If two users are logged into the SSO operator dashboard concurrently with the same username from different identity providers, on...