Vulnerabilitycritical
GitHub patches critical vulnerability in its Enterprise Servers
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-4985 | An authentication bypass vulnerability was present in the GitHub Enterprise Server (GHES) when utilizing SAML single sign-on authentication with the optional… | 10.0 | 3% | ||
| CVE-2024-9487 | Improper SAML Signature Verification Bypasses SSO in GitHub Enterprise Server | 9.5 | 26% | ||
| CVE-2024-9539 | An information disclosure vulnerability was identified in GitHub Enterprise Server via attacker uploaded asset URL allowing the attacker to retrieve metadata… | 5.7 | <1% |
From the original article
3 min read at cyberscoop.com
The “severe” flaw could allow attackers full access to instances. PARIS, FRANCE - JUNE 04: In this photo illustration the GitHub logo is seen on the screen of an iPhone in front of a computer screen showing a Microsoft logo on June 04, 2018 in Paris, France.
By @chrismvasq · cyberscoop.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.