PT-2024-5050 · Github · Github Enterprise Server

Imre Rad · Published 2024-05-20 · Updated 2025-08-27 · CVE-2024-4985

Positive Technologies (AI Summary)

CVSS v4.0

10

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/R:U/V:C/RE:M/U:Red

Name of the Vulnerable Software and Affected Versions: GitHub Enterprise Server versions prior to 3.13.0 GitHub Enterprise Server version 3.9.15 GitHub Enterprise Server version 3.10.12 GitHub Enterprise Server version 3.11.10 GitHub Enterprise Server version 3.12.4

Description: An authentication bypass vulnerability was present in the GitHub Enterprise Server when utilizing SAML single sign-on authentication with the optional encrypted assertions feature. This vulnerability allowed an attacker to forge a SAML response to provision and/or gain access to a user with site administrator privileges. Exploitation of this vulnerability would allow unauthorized access to the instance without requiring prior authentication. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited.

Recommendations: For GitHub Enterprise Server versions prior to 3.13.0, update to version 3.13.0 or later. For GitHub Enterprise Server version 3.9.15, no additional action is required as this version already contains the fix. For GitHub Enterprise Server version 3.10.12, no additional action is required as this version already contains the fix. For GitHub Enterprise Server version 3.11.10, no additional action is required as this version already contains the fix. For GitHub Enterprise Server version 3.12.4, no additional action is required as this version already contains the fix. As a temporary workaround, consider disabling the SAML single sign-on authentication with encrypted assertions feature until a patch is available. Restrict access to the SAML authentication module to minimize the risk of exploitation. Avoid using the encrypted assertions feature in the affected API endpoint until the issue is resolved.

Fix

Weakness Enumeration

CWE-303

Related Identifiers

BDU:2024-05577

CVE-2024-4985

Affected Products

Github Enterprise Server

References · 57

• https://bdu.fstec.ru/vul/2024-05577 · Security Note
• https://osv.dev/vulnerability/CVE-2024-4985 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-4985 · Security Note
• https://twitter.com/CCBalert/status/1792951752343322765 · Twitter Post
• https://github.com/advisories/GHSA-5pw9-f9r4-mv2r · Note
• https://twitter.com/XynikIT/status/1792973039627366894 · Twitter Post
• https://t.me/ckured/512 · Telegram Post
• https://twitter.com/fofabot/status/1792800593201053699 · Twitter Post
• https://twitter.com/Komodosec/status/1792808565717291394 · Twitter Post
• https://twitter.com/jvquantum/status/1792953947172319391 · Twitter Post
• https://t.me/cvenotify/80542 · Telegram Post
• https://twitter.com/YourAnonRiots/status/1793450523850571954 · Twitter Post
• https://t.me/opennews/12898 · Telegram Post
• https://t.me/cveNotify/133769 · Telegram Post
• https://docs.github.com/en/enterprise-server@3.11/admin/release-notes#3.11.10 · Note