Subj : GitHub Enterprise Server has a critical security flaw, so patch n
To   : All
From : TechnologyDaily
Date : Thu Aug 22 2024 15:15:04

GitHub Enterprise Server has a critical security flaw, so patch now

Date:
Thu, 22 Aug 2024 14:11:00 +0000

Description:
A newly discovered security flaw allows hackers to elevate their privileges 
and thus take over vulnerable endpoints.

FULL STORY
======================================================================

GitHub Enterprise Server, the self-hosted version of the GitHub platform, was 
found carrying a vulnerability that allowed malicious actors to elevate their 
privileges to admin. 

The vulnerability, tracked as CVE-2024-6800, and has a severity rating of 
9.5/10 (critical), is described as an XML signature wrapping issue. It 
happens when the victim uses the Security Assertion Markup Language (SAML) 
authentication standard, with certain ID providers. 

On GitHub Enterprise Server instances that use SAML single sign-on (SSO) 
authentication with specific IdPs utilizing publicly exposed signed 
federation metadata XML, an attacker could forge a SAML response to provision 
and/or gain access to a user account with site administrator privileges, 
GitHub said in a security advisory. Big bounty 

Patches are available for multiple versions, it was added. The earliest 
secure versions of GitHub Enterprise Server are 3.13.3, 3.12.8, 3.11.14, and 
3.10.16. 

Citing data from the FOFA search engine, BleepingComputer claims that there 
are more than 36,500 internet-connected instances, making the attack surface 
relatively large. Of those servers, the majority (29,200) is sitting in the 
United States. However, it is impossible to determine how many are running 
vulnerable software versions. History teaches us that IT teams are rarely 
that diligent, and that it will take weeks, if not months, for the majority 
of instances to upgrade to the latest version. 

Still, if your organization is running GHES, dont hesitate with the update, 
since the flaw allows threat actors to take over vulnerable endpoints. 

The new versions of the platform also fix two additional vulnerabilities: 
CVE-2024-7711, and CVE-2024-6337. The former allows attackers to modify 
issues on public repositories, while the latter allows publicly disclosing 
issue content from a private repository. 

GitHub added that certain services might display error messages during 
configuration, but the instance should still start properly. 

 Via BleepingComputer More from TechRadar Pro GitHub malware spreads by 
hackers spoofing Microsoft files Here's a list of the best firewall software 
around today These are the best endpoint security tools right now



======================================================================
Link to news story:
https://www.techradar.com/pro/security/github-enterprise-server-has-a-critical
-security-flaw-so-patch-now


--- Mystic BBS v1.12 A47 (Linux/64)
 * Origin: tqwNet Technology News (1337:1/100)

.