PT-2024-6935 · Github · Github Enterprise Server
Securesaml.Com
·
Published
2024-10-10
·
Updated
2025-03-27
·
CVE-2024-9487
CVSS v4.0
9.5
Critical
| Vector | AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L/R:U/V:C/RE:M/U:Red |
Name of the Vulnerable Software and Affected Versions
GitHub Enterprise Server versions prior to 3.15
GitHub Enterprise Server version 3.11.16
GitHub Enterprise Server version 3.12.10
GitHub Enterprise Server version 3.13.5
GitHub Enterprise Server version 3.14.2
Description
The vulnerability is related to an improper verification of cryptographic signatures in GitHub Enterprise Server, allowing SAML SSO authentication to be bypassed. This results in unauthorized provisioning of users and access to the instance. The exploitation requires the encrypted assertions feature to be enabled, and the attacker needs direct network access as well as a signed SAML response or metadata document.
Recommendations
For GitHub Enterprise Server versions prior to 3.11.16, update to version 3.11.16 or later.
For GitHub Enterprise Server versions prior to 3.12.10, update to version 3.12.10 or later.
For GitHub Enterprise Server versions prior to 3.13.5, update to version 3.13.5 or later.
For GitHub Enterprise Server versions prior to 3.14.2, update to version 3.14.2 or later.
As a temporary workaround, consider disabling the encrypted assertions feature until a patch is available.
Restrict access to the SAML SSO authentication module to minimize the risk of exploitation.
Fix
Improper Verification of Cryptographic Signature
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Github Enterprise Server