GitHub Enterprise Server up to 3.7.17/3.8.10/3.9.5/3.10.2 Configuration File permission

Summaryinfo

A vulnerability classified as critical has been found in GitHub Enterprise Server up to 3.7.17/3.8.10/3.9.5/3.10.2. This issue affects some unknown processing of the component Configuration File Handler. Performing a manipulation results in permission. This vulnerability is identified as CVE-2023-23767. The attack is only possible with local access. There is not any exploit available. It is recommended to upgrade the affected component.

Detailsinfo

A vulnerability, which was classified as problematic, was found in GitHub Enterprise Server up to 3.7.17/3.8.10/3.9.5/3.10.2 (Bug Tracking Software). This affects some unknown processing of the component Configuration File Handler. The manipulation with an unknown input leads to a permission vulnerability. CWE is classifying the issue as CWE-275. This is going to have an impact on confidentiality. The summary by CVE is:

Incorrect Permission Assignment for Critical Resource in GitHub Enterprise Server that allowed local operating system user accounts to read MySQL connection details including the MySQL password via configuration files. This vulnerability affected all versions of GitHub Enterprise Server and was fixed in versions 3.7.18, 3.8.11, 3.9.6, and 3.10.3.

The weakness was released 10/25/2023. It is possible to read the advisory at docs.github.com. This vulnerability is uniquely identified as CVE-2023-23767 since 01/17/2023. The technical details are unknown and an exploit is not publicly available. The attack technique deployed by this issue is T1222 according to MITRE ATT&CK.

Upgrading to version 3.7.18, 3.8.11, 3.9.6 or 3.10.3 eliminates this vulnerability. The upgrade is hosted for download at docs.github.com.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Type

• Bug Tracking Software

Vendor

• GitHub

Name

• Enterprise Server

Version

• 3.7.0
• 3.7.1
• 3.7.2
• 3.7.3
• 3.7.4
• 3.7.5
• 3.7.6
• 3.7.7
• 3.7.8
• 3.7.9
• 3.7.10
• 3.7.11
• 3.7.12
• 3.7.13
• 3.7.14
• 3.7.15
• 3.7.16
• 3.7.17
• 3.8.0
• 3.8.1
• 3.8.2
• 3.8.3
• 3.8.4
• 3.8.5
• 3.8.6
• 3.8.7
• 3.8.8
• 3.8.9
• 3.8.10
• 3.9.0
• 3.9.1
• 3.9.2
• 3.9.3
• 3.9.4
• 3.9.5
• 3.10.0
• 3.10.1
• 3.10.2

License

• open-source

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion