DeutschShown in its original language — a full translation is planned for a future version.
Microsoft GitHub Enterprise: Mehrere Schwachstellen
view advisory published 2024-08-20
Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in Microsoft GitHub Enterprise ausnutzen, um Sicherheitsvorkehrungen zu umgehen, erweiterte Rechte zu erlangen und Daten zu ändern.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-7711US | medium4.3OT elevated | — | ||
An Incorrect Authorization vulnerability was identified in GitHub Enterprise Server, allowing an attacker to update the title, assignees, and labels of any issue inside a public re… | ||||
| CVE-2024-6800US | critical9.8 | — | ||
An XML signature wrapping vulnerability was present in GitHub Enterprise Server (GHES) when using SAML authentication with specific identity providers utilizing publicly exposed si… | ||||
| CVE-2024-6337US | medium6.5OT elevated | — | ||
An Incorrect Authorization vulnerability was identified in GitHub Enterprise Server that allowed a GitHub App with only content: read and pull_request_write: write permissions to r… | ||||
02
references
External citations — patches, advisories, analysis.
- Enterprise Server 3.10.16 Release Notes vom 2024-08-20external
- Enterprise Server 3.11.14 Release Notes vom 2024-08-20external
- Enterprise Server 3.12.8 Release Notes vom 2024-08-20external
- Enterprise Server 3.13.3 Release Notes vom 2024-08-20external
- WID-SEC-W-2024-1890 - CSAF Versionself
- WID-SEC-2024-1890 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan