PT-2024-33706 · Github · Github Enterprise Server

Published 2024-05-21 · Updated 2024-05-21 · CVE-2024-4986

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions: GitHub Enterprise Server (affected versions not specified)

Description: The issue affects instances with SAML SSO and encrypted assertions, allowing an attacker to forge a SAML response and gain admin privileges and unrestricted access to the instance's contents. This is related to a SAML authentication bypass flaw.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2024-4986

Affected Products

Github Enterprise Server

References · 4

• https://twitter.com/MostExploited/status/1792964988136763616 · Twitter Post
• https://twitter.com/GRComputers/status/1792935416540156317 · Twitter Post
• https://twitter.com/XynikIT/status/1792937759562174769 · Twitter Post
• https://twitter.com/MostExploited/status/1792965436759486548 · Twitter Post