CVE-2024-3470: Repository administrator can bypass organization's ruleset using deploy keys
First published: Fri Apr 19 2024(Updated: )
An Improper Privilege Management vulnerability was identified in GitHub Enterprise Server that allowed an attacker to use a deploy key pertaining to an organization to bypass an organization ruleset. An attacker would require access to a valid deploy key for a repository in the organization as well as repository administrator access. This vulnerability affected versions of GitHub Enterprise Server 3.11 to 3.12 and was fixed in versions 3.11.8 and 3.12.2. This vulnerability was reported via the GitHub Bug Bounty program.
Credit: product-cna@github.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| GitHub Enterprise | >=3.11<3.12 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-3470?
CVE-2024-3470 has been classified as a moderate severity vulnerability due to its potential to bypass organizational rulesets.
How do I fix CVE-2024-3470?
To remediate CVE-2024-3470, update GitHub Enterprise Server to version 3.12.2 or later.
Who is affected by CVE-2024-3470?
CVE-2024-3470 affects GitHub Enterprise Server versions 3.11 through 3.12 before the fix.
What type of vulnerability is CVE-2024-3470?
CVE-2024-3470 is categorized as an Improper Privilege Management vulnerability.
Can an attacker exploit CVE-2024-3470 without credentials?
An attacker would need access to a valid deploy key to exploit CVE-2024-3470.
- agent/title
- agent/references
- agent/type
- agent/weakness
- agent/first-publish-date
- agent/description
- agent/severity
- agent/author
- agent/event
- collector/epss-latest
- source/FIRST
- agent/epss
- collector/mitre-cve
- source/MITRE
- collector/nvd-api
- source/NVD
- agent/last-modified-date
- agent/source
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/github
- canonical/github enterprise