Lucene search

GitHub_PCVE-2022-23738

HistoryNov 01, 2022 - 6:15 p.m.

CVE-2022-23738

2022-11-0118:15:10

CWE-200

CWE-552

GitHub_P

web.nvd.nist.gov

cve-2022-23738

github

enterprise server

vulnerability

unauthorized access

private repository

public repository

exploitation

authorization

site administrator

url

bug bounty program

CVSS3

5.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

AI Score

5.4

Confidence

High

EPSS

0.001

Percentile

44.1%

JSON

An improper cache key vulnerability was identified in GitHub Enterprise Server that allowed an unauthorized actor to access private repository files through a public repository. To exploit this, an actor would need to already be authorized on the GitHub Enterprise Server instance, be able to create a public repository, and have a site administrator visit a specially crafted URL. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.6 and was fixed in versions 3.2.20, 3.3.15, 3.4.10, 3.5.7, 3.6.3. This vulnerability was reported via the GitHub Bug Bounty program.

Affected configurations

Nvd

Vulners

Node

githubenterprise_serverRange3.2.0–3.2.20

githubenterprise_serverRange3.3.0–3.3.15

githubenterprise_serverRange3.4.0–3.4.10

githubenterprise_serverRange3.5.0–3.5.7

githubenterprise_serverRange3.6.0–3.6.3

VendorProductVersionCPE
githubenterprise_server*cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
github	enterprise_server	*	cpe:2.3:a:github:enterprise_server::::::::

CNA Affected

[
  {
    "vendor": "GitHub",
    "product": "GitHub Enterprise Server",
    "versions": [
      {
        "version": "3.2",
        "status": "affected",
        "lessThan": "3.2.20",
        "versionType": "custom"
      },
      {
        "version": "3.3",
        "status": "affected",
        "lessThan": "3.3.15",
        "versionType": "custom"
      },
      {
        "version": "3.4",
        "status": "affected",
        "lessThan": "3.4.10",
        "versionType": "custom"
      },
      {
        "version": "3.5",
        "status": "affected",
        "lessThan": "3.5.7",
        "versionType": "custom"
      },
      {
        "version": "3.6",
        "status": "affected",
        "lessThan": "3.6.3",
        "versionType": "custom"
      }
    ]
  }
]

References

docs.github.com/en/enterprise-server%403.2/admin/release-notes#3.2.20

docs.github.com/en/enterprise-server%403.3/admin/release-notes#3.3.15

docs.github.com/en/enterprise-server%403.4/admin/release-notes#3.4.10

docs.github.com/en/enterprise-server%403.5/admin/release-notes#3.5.7

docs.github.com/en/enterprise-server%403.6/admin/release-notes#3.6.3

CVSS3

5.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

AI Score

5.4

Confidence

High

EPSS

0.001

Percentile

44.1%

JSON

Related for CVE-2022-23738