PT-2024-9876 · Github · Github Enterprise Server

Yvvdwf · Published 2024-02-13 · Updated 2024-10-17 · CVE-2024-1082

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions: GitHub Enterprise Server versions prior to 3.12 GitHub Enterprise Server versions 3.8.0 through 3.8.14 GitHub Enterprise Server versions 3.9.0 through 3.9.9 GitHub Enterprise Server versions 3.10.0 through 3.10.6 GitHub Enterprise Server versions 3.11.0 through 3.11.4

Description: A path traversal vulnerability was identified in GitHub Enterprise Server that allows an attacker to gain unauthorized read permission to files by deploying arbitrary symbolic links to a GitHub Pages site with a specially crafted artifact tarball. To exploit this vulnerability, an attacker would need permission to create and build a GitHub Pages site on the GitHub Enterprise Server instance. This vulnerability was reported via the GitHub Bug Bounty program.

Recommendations: For GitHub Enterprise Server versions 3.8.0 through 3.8.14, update to version 3.8.15. For GitHub Enterprise Server versions 3.9.0 through 3.9.9, update to version 3.9.10. For GitHub Enterprise Server versions 3.10.0 through 3.10.6, update to version 3.10.7. For GitHub Enterprise Server versions 3.11.0 through 3.11.4, update to version 3.11.5. For GitHub Enterprise Server versions prior to 3.8.0, update to a fixed version. As a temporary workaround, consider restricting access to the GitHub Pages site to minimize the risk of exploitation.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

BDU:2024-11654

CVE-2024-1082

Affected Products

Github Enterprise Server

References · 9

• https://docs.github.com/en/enterprise-server@3.10/admin/release-notes#3.10.7 · Vendor Advisory
• https://docs.github.com/en/enterprise-server@3.8/admin/release-notes#3.8.15 · Vendor Advisory
• https://docs.github.com/en/enterprise-server@3.11/admin/release-notes#3.11.5 · Vendor Advisory
• https://docs.github.com/en/enterprise-server@3.9/admin/release-notes#3.9.10 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-11654 · Security Note
• https://osv.dev/vulnerability/CVE-2024-1082 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-1082 · Security Note
• https://t.me/cvenotify/98534 · Telegram Post
• https://twitter.com/CVEnew/status/1757482920997269749 · Twitter Post