Lucene search

GitHub_PCVE-2022-23732

HistoryApr 05, 2022 - 12:15 a.m.

CVE-2022-23732

2022-04-0500:15:17

CWE-23

CWE-22

GitHub_P

web.nvd.nist.gov

github

enterprise server

cve-2022-23732

path traversal

csrf

privilege escalation

security vulnerability

github bug bounty

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.6

Confidence

High

EPSS

0.002

Percentile

56.0%

JSON

A path traversal vulnerability was identified in GitHub Enterprise Server management console that allowed the bypass of CSRF protections. This could potentially lead to privilege escalation. To exploit this vulnerability, an attacker would need to target a user that was actively logged into the management console. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.5 and was fixed in versions 3.1.19, 3.2.11, 3.3.6, 3.4.1. This vulnerability was reported via the GitHub Bug Bounty program.

Affected configurations

Nvd

Vulners

Node

githubenterprise_serverRange<3.1.19

githubenterprise_serverRange3.2.0–3.2.11

githubenterprise_serverRange3.3.0–3.3.6

githubenterprise_serverRange3.4.0–3.4.1

VendorProductVersionCPE
githubenterprise_server*cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
github	enterprise_server	*	cpe:2.3:a:github:enterprise_server::::::::

CNA Affected

[
  {
    "product": "GitHub Enterprise Server",
    "vendor": "GitHub",
    "versions": [
      {
        "lessThan": "3.1.19",
        "status": "affected",
        "version": "3.1",
        "versionType": "custom"
      },
      {
        "lessThan": "3.2.11",
        "status": "affected",
        "version": "3.2",
        "versionType": "custom"
      },
      {
        "lessThan": "3.3.6",
        "status": "affected",
        "version": "3.3",
        "versionType": "custom"
      },
      {
        "lessThan": "3.4.1",
        "status": "affected",
        "version": "3.4",
        "versionType": "custom"
      }
    ]
  }
]

References

docs.github.com/en/enterprise-server%403.1/admin/release-notes#3.1.19

docs.github.com/en/enterprise-server%403.2/admin/release-notes#3.2.11

docs.github.com/en/enterprise-server%403.3/admin/release-notes#3.3.6

docs.github.com/en/enterprise-server%403.4/admin/release-notes#3.4.1

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.6

Confidence

High

EPSS

0.002

Percentile

56.0%

JSON

Related for CVE-2022-23732