March 22, 2024
Severity High Analysis Summary Ducktail Malware is a malicious program designed by hackers to infiltrate computers and networks globally. Ducktail malware is typically delivered through a […]
Rewterz Threat Advisory – Multiple Apache InLong Vulnerabilities
January 4, 2024
Rewertz Threat Update – Orbit Chain Breach Results in Theft of Over $81 Million in Cryptocurrency
January 4, 2024
Rewterz Threat Advisory – Multiple Apache InLong Vulnerabilities
January 4, 2024
Rewertz Threat Update – Orbit Chain Breach Results in Theft of Over $81 Million in Cryptocurrency
January 4, 2024
Severity
High
Analysis Summary
CVE-2023-6847
GitHub Enterprise Server could allow a remote attacker to bypass security restrictions, caused by an improper authentication vulnerability. By using a specially crafted API request, an attacker could exploit this vulnerability to bypass authentication for public repository data.
Impact
- Security Bypass
Indicators Of Compromise
CVE
- CVE-2023-6847
Affected Vendors
GitHUB
Affected Products
- GitHub Enterprise Server 3.9.6
- GitHub Enterprise Server 3.10.3
- GitHub Enterprise Server 3.11.0
Remediation
Refer to GitHub Docs Website for patch, upgrade or suggested workaround information.