This report was translated by AI; nobody has reviewed the translation yet. Original language: Czech.
[TLP:CLEAR] GitHub Enterprise Server fixes 2 vulnerabilities
GitHub Enterprise Server versions 3.11.16, 3.12.10, 3.13.5 and 3.14.2 fix two vulnerabilities, one of which is of high severity [1][2].
An unauthenticated remote attacker can, due to improper verification of a cryptographic signature, bypass SAML SSO authentication and gain unauthorized access to the instance. Exploiting the vulnerability requires the "encrypted assertions" feature to be enabled and the attacker to have direct network access and access to a signed SAML response or metadata document [1].
The vulnerability is present in product:
- GitHub Enterprise Server; >=3.11, <3.11.16; >=3.12, <3.12.10; >=3.13, <3.13.5; >=3.14, <3.14.2
CVSS: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L
More information:
- CVE-2024-9487 at cve.org, NVD
- CWE-347: Improper Verification of Cryptographic Signature at cwe.mitre.org
The vulnerability was publicly disclosed 10. 10. 2024.
An authenticated remote attacker can, using social engineering techniques via a specific URL, obtain user metadata and further use it to create a phishing page [2].
The vulnerability is present in product:
- GitHub Enterprise Server; >=3.11, <3.11.16; >=3.12, <3.12.10; >=3.13, <3.13.5
CVSS: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N
More information:
- CVE-2024-9539 at cve.org, NVD
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor at cwe.mitre.org
The vulnerability was publicly disclosed 11. 10. 2024.
Links
By CESNET, z.s.p.o. Michaela Ručková on 22. 10. 2024.