GitHub Enterprise Server up to 3.8.11/3.9.6/3.10.3/3.11.0 privileges management

Summaryinfo

A vulnerability was found in GitHub Enterprise Server up to 3.8.11/3.9.6/3.10.3/3.11.0. It has been classified as critical. Affected by this issue is some unknown functionality. Performing a manipulation results in privileges management. This vulnerability is cataloged as CVE-2023-6804. The attack must be initiated from a local position. There is no exploit available. Upgrading the affected component is recommended.

Detailsinfo

A vulnerability, which was classified as critical, was found in GitHub Enterprise Server up to 3.8.11/3.9.6/3.10.3/3.11.0 (Bug Tracking Software). This affects an unknown code block. The manipulation with an unknown input leads to a privileges management vulnerability. CWE is classifying the issue as CWE-269. The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

Improper privilege management allowed arbitrary workflows to be committed and run using an improperly scoped PAT. To exploit this, a workflow must have already existed in the target repo. This vulnerability affected all versions of GitHub Enterprise Server since 3.8 and was fixed in version 3.8.12, 3.9.7, 3.10.4, and 3.11.1.

The weakness was shared 12/22/2023. It is possible to read the advisory at docs.github.com. This vulnerability is uniquely identified as CVE-2023-6804 since 12/13/2023. The technical details are unknown and an exploit is not publicly available. The attack technique deployed by this issue is T1068 according to MITRE ATT&CK.

Upgrading to version 3.8, 3.8.12, 3.9.7, 3.10.4 or 3.11.1 eliminates this vulnerability. The upgrade is hosted for download at docs.github.com.

Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Type

• Bug Tracking Software

Vendor

• GitHub

Name

• Enterprise Server

Version

• 3.0
• 3.1
• 3.2
• 3.3
• 3.4
• 3.5
• 3.6
• 3.7
• 3.8
• 3.8.0
• 3.8.1
• 3.8.2
• 3.8.3
• 3.8.4
• 3.8.5
• 3.8.6
• 3.8.7
• 3.8.8
• 3.8.9
• 3.8.10
• 3.8.11
• 3.9
• 3.9.0
• 3.9.1
• 3.9.2
• 3.9.3
• 3.9.4
• 3.9.5
• 3.9.6
• 3.10
• 3.10.0
• 3.10.1
• 3.10.2
• 3.10.3
• 3.11.0

License

• open-source

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion