CVE-2023-6804: Improper Privilege Management allows for arbitrary workflows to be run
First published: Thu Dec 21 2023(Updated: )
Improper privilege management allowed arbitrary workflows to be committed and run using an improperly scoped PAT. To exploit this, a workflow must have already existed in the target repo. This vulnerability affected all versions of GitHub Enterprise Server since 3.8 and was fixed in version 3.8.12, 3.9.7, 3.10.4, and 3.11.1.
Credit: product-cna@github.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| GitHub Enterprise | >=3.8.0<3.8.12 | |
| GitHub Enterprise | >=3.9.0<3.9.7 | |
| GitHub Enterprise | >=3.10.0<3.10.4 | |
| GitHub Enterprise | =3.11.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://docs.github.com/en/enterprise-server@3.8/admin/release-notes#3.8.12
- https://docs.github.com/en/enterprise-server@3.9/admin/release-notes#3.9.7
- https://docs.github.com/en/enterprise-server@3.10/admin/release-notes#3.10.4
- https://docs.github.com/en/enterprise-server@3.11/admin/release-notes#3.11.1
Frequently Asked Questions
What is the severity of CVE-2023-6804?
CVE-2023-6804 is considered a high severity vulnerability due to its potential to allow arbitrary workflows to be executed.
How do I fix CVE-2023-6804?
To mitigate CVE-2023-6804, upgrade to GitHub Enterprise Server versions 3.8.12, 3.9.7, 3.10.4, or 3.11.0.
Who is affected by CVE-2023-6804?
CVE-2023-6804 affects all versions of GitHub Enterprise Server from 3.8.0 up to 3.11.0.
What is the nature of the vulnerability in CVE-2023-6804?
CVE-2023-6804 involves improper privilege management which can lead to unauthorized execution of workflows.
Can CVE-2023-6804 be exploited without prior access?
Exploitation of CVE-2023-6804 requires that an arbitrary workflow already exists in the target repository.
- agent/references
- agent/type
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/severity
- agent/weakness
- agent/title
- agent/author
- agent/description
- collector/epss-latest
- source/FIRST
- agent/epss
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/github
- canonical/github enterprise
- version/github enterprise/3.8.0
- version/github enterprise/3.9.0
- version/github enterprise/3.10.0
- version/github enterprise/3.11.0