What is the severity of CVE-2024-10824?

CVE-2024-10824 is classified as a high-severity vulnerability that allows unauthorized access to sensitive data.

How do I fix CVE-2024-10824?

To fix CVE-2024-10824, update GitHub Enterprise Server to version 3.13.2 or later.

Who is affected by CVE-2024-10824?

CVE-2024-10824 affects organizations using GitHub Enterprise Server versions between 3.13.0 and 3.14.0.

What type of vulnerability is CVE-2024-10824?

CVE-2024-10824 is an authorization bypass vulnerability.

Can CVE-2024-10824 be exploited by any user?

No, CVE-2024-10824 can only be exploited by organization members with a personal access token.

Vulnerability/
CVE-2024-10824

medium

CWE

862

7/11/2024

8/11/2024

CVE-2024-10824: Authorization Bypass Vulnerability was Identified in GitHub Enterprise Server that Allowed Unauthorized Internal Users to Access Secret Scanning Alert Data

First published: Thu Nov 07 2024(Updated: )

An authorization bypass vulnerability was identified in GitHub Enterprise Server that allowed unauthorized internal users to access sensitive secret scanning alert data intended only for business owners. This issue could be exploited only by organization members with a personal access token (PAT) and required that secret scanning be enabled on user-owned repositories. This vulnerability affected GitHub Enterprise Server versions after 3.13.0 but prior to 3.14.0 and was fixed in version 3.13.2.

Credit: product-cna@github.com

Affected Software	Affected Version	How to fix
GitHub Enterprise	>3.13.0<3.14.0

Never miss a vulnerability like this again

Reference Links

https://docs.github.com/en/enterprise-server@3.13/admin/release-notes#3.13.2

Frequently Asked Questions

What is the severity of CVE-2024-10824?
CVE-2024-10824 is classified as a high-severity vulnerability that allows unauthorized access to sensitive data.
How do I fix CVE-2024-10824?
To fix CVE-2024-10824, update GitHub Enterprise Server to version 3.13.2 or later.
Who is affected by CVE-2024-10824?
CVE-2024-10824 affects organizations using GitHub Enterprise Server versions between 3.13.0 and 3.14.0.
What type of vulnerability is CVE-2024-10824?
CVE-2024-10824 is an authorization bypass vulnerability.
Can CVE-2024-10824 be exploited by any user?
No, CVE-2024-10824 can only be exploited by organization members with a personal access token.

agent/weakness
agent/references
agent/title
agent/type
agent/first-publish-date
agent/description
agent/author
agent/severity
agent/event
collector/nvd-api
source/NVD
agent/last-modified-date
collector/mitre-cve
source/MITRE
agent/source
agent/tags
agent/softwarecombine
agent/guess-ai
agent/software-canonical-lookup
agent/software-canonical-lookup-request
vendor/github
canonical/github enterprise

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.