description: Concourse (7.x.y prior to 7.8.3 and 6.x.y prior to 6.7.9) contains an authorization bypass issue. A Concourse user can send a request with body including :team_name=team2 to bypass team scope check to gain access to certain resources belong to any other team.
problem types: Authorization Bypass vulnerability
affected:
{
vendor: n/a
product: Concourse
versions:
version: Concourse (7.x.y prior to 7.8.3 and 6.x.y prior to 6.7.9), status: affected
}