GSD-2023-23761
Vulnerability from gsd - Updated: 2023-12-13 01:20Details
An improper authentication vulnerability was identified in GitHub Enterprise Server that allowed an unauthorized actor to modify other users' secret gists by authenticating through an SSH certificate authority. To do so, a user had to know the secret gist's URL. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.9 and was fixed in versions 3.4.18, 3.5.15, 3.6.11, 3.7.8, and 3.8.1. This vulnerability was reported via the GitHub Bug Bounty program.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2023-23761",
"id": "GSD-2023-23761"
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2023-23761"
],
"details": "An improper authentication vulnerability was identified in GitHub Enterprise Server that allowed an unauthorized actor to modify other users\u0027 secret gists by authenticating through an SSH certificate authority. To do so, a user had to know the secret gist\u0027s URL. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.9 and was fixed in versions 3.4.18, 3.5.15, 3.6.11, 3.7.8, and 3.8.1. This vulnerability was reported via the GitHub Bug Bounty program.",
"id": "GSD-2023-23761",
"modified": "2023-12-13T01:20:50.210223Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "product-cna@github.com",
"ID": "CVE-2023-23761",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Enterprise Server",
"version": {
"version_data": [
{
"version_value": "not down converted",
"x_cve_json_5_version_data": {
"defaultStatus": "affected",
"versions": [
{
"changes": [
{
"at": "3.4.18",
"status": "unaffected"
}
],
"lessThanOrEqual": "3.4.17",
"status": "affected",
"version": "3.4.0",
"versionType": "semver"
},
{
"changes": [
{
"at": "3.5.15",
"status": "unaffected"
}
],
"lessThanOrEqual": "3.5.14",
"status": "affected",
"version": "3.5.0",
"versionType": "semver"
},
{
"changes": [
{
"at": "3.6.11",
"status": "unaffected"
}
],
"lessThanOrEqual": "3.6.10",
"status": "affected",
"version": "3.6.0",
"versionType": "semver"
},
{
"changes": [
{
"at": "3.7.8",
"status": "unaffected"
}
],
"lessThanOrEqual": "3.7.7",
"status": "affected",
"version": "3.7.0",
"versionType": "semver"
},
{
"changes": [
{
"at": "3.8.1",
"status": "unaffected"
}
],
"lessThan": "3.8.1",
"status": "affected",
"version": "3.8.0",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "3.9.0"
}
]
}
}
]
}
}
]
},
"vendor_name": "GitHub"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "An improper authentication vulnerability was identified in GitHub Enterprise Server that allowed an unauthorized actor to modify other users\u0027 secret gists by authenticating through an SSH certificate authority. To do so, a user had to know the secret gist\u0027s URL. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.9 and was fixed in versions 3.4.18, 3.5.15, 3.6.11, 3.7.8, and 3.8.1. This vulnerability was reported via the GitHub Bug Bounty program."
}
]
},
"generator": {
"engine": "Vulnogram 0.1.0-dev"
},
"impact": {
"cvss": [
{
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"cweId": "CWE-287",
"lang": "eng",
"value": "CWE-287 Improper Authentication"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://docs.github.com/en/enterprise-server@3.8/admin/release-notes#3.8.1",
"refsource": "MISC",
"url": "https://docs.github.com/en/enterprise-server@3.8/admin/release-notes#3.8.1"
},
{
"name": "https://docs.github.com/en/enterprise-server@3.7/admin/release-notes#3.7.8",
"refsource": "MISC",
"url": "https://docs.github.com/en/enterprise-server@3.7/admin/release-notes#3.7.8"
},
{
"name": "https://docs.github.com/en/enterprise-server@3.6/admin/release-notes#3.6.11",
"refsource": "MISC",
"url": "https://docs.github.com/en/enterprise-server@3.6/admin/release-notes#3.6.11"
},
{
"name": "https://docs.github.com/en/enterprise-server@3.5/admin/release-notes#3.5.15",
"refsource": "MISC",
"url": "https://docs.github.com/en/enterprise-server@3.5/admin/release-notes#3.5.15"
},
{
"name": "https://docs.github.com/en/enterprise-server@3.4/admin/release-notes#3.4.18",
"refsource": "MISC",
"url": "https://docs.github.com/en/enterprise-server@3.4/admin/release-notes#3.4.18"
}
]
},
"source": {
"discovery": "UNKNOWN"
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:github:enterprise_server:3.8.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.7.8",
"versionStartIncluding": "3.7.0",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.6.11",
"versionStartIncluding": "3.6.0",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.5.15",
"versionStartIncluding": "3.5.0",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.4.18",
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "product-cna@github.com",
"ID": "CVE-2023-23761"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "An improper authentication vulnerability was identified in GitHub Enterprise Server that allowed an unauthorized actor to modify other users\u0027 secret gists by authenticating through an SSH certificate authority. To do so, a user had to know the secret gist\u0027s URL. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.9 and was fixed in versions 3.4.18, 3.5.15, 3.6.11, 3.7.8, and 3.8.1. This vulnerability was reported via the GitHub Bug Bounty program."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-287"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://docs.github.com/en/enterprise-server@3.7/admin/release-notes#3.7.8",
"refsource": "MISC",
"tags": [
"Release Notes"
],
"url": "https://docs.github.com/en/enterprise-server@3.7/admin/release-notes#3.7.8"
},
{
"name": "https://docs.github.com/en/enterprise-server@3.4/admin/release-notes#3.4.18",
"refsource": "MISC",
"tags": [
"Release Notes"
],
"url": "https://docs.github.com/en/enterprise-server@3.4/admin/release-notes#3.4.18"
},
{
"name": "https://docs.github.com/en/enterprise-server@3.6/admin/release-notes#3.6.11",
"refsource": "MISC",
"tags": [
"Release Notes"
],
"url": "https://docs.github.com/en/enterprise-server@3.6/admin/release-notes#3.6.11"
},
{
"name": "https://docs.github.com/en/enterprise-server@3.5/admin/release-notes#3.5.15",
"refsource": "MISC",
"tags": [
"Release Notes"
],
"url": "https://docs.github.com/en/enterprise-server@3.5/admin/release-notes#3.5.15"
},
{
"name": "https://docs.github.com/en/enterprise-server@3.8/admin/release-notes#3.8.1",
"refsource": "MISC",
"tags": [
"Release Notes"
],
"url": "https://docs.github.com/en/enterprise-server@3.8/admin/release-notes#3.8.1"
}
]
}
},
"impact": {
"baseMetricV3": {
"cvssV3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"exploitabilityScore": 1.6,
"impactScore": 3.6
}
},
"lastModifiedDate": "2023-04-18T16:15Z",
"publishedDate": "2023-04-07T19:15Z"
}
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…