漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Concourse's GitLab auth allows impersonation
Vulnerability Description
Concourse, versions prior to 6.3.1 and 6.4.1, in installations which use the GitLab auth connector, is vulnerable to identity spoofing by way of configuring a GitLab account with the same full name as another user who is granted access to a Concourse team. GitLab groups do not have this vulnerability, so GitLab users may be moved into groups which are then configured in the Concourse team.
CVSS Information
N/A
Vulnerability Type
使用欺骗进行的认证绕过
Vulnerability Title
Pivotal Software Concourse 安全漏洞
Vulnerability Description
Pivotal Software Concourse是美国Pivotal Software公司的一套用于持续开发的软件交付控制系统。 Pivotal Software Concourse 6.3.1之前版本和6.4.1之前版本（配置有GitLab auth connector）中存在安全漏洞。攻击者可利用该漏洞冒充其他用户。
CVSS Information
N/A
Vulnerability Type
N/A