Rewterz Threat Advisory – Multiple Apache InLong Vulnerabilities

Rewertz Threat Update – Orbit Chain Breach Results in Theft of Over $81 Million in Cryptocurrency

January 4, 2024

Rewterz Threat Advisory – CVE-2023-6847 – GitHub Enterprise Server Vulnerability

Severity

High

Analysis Summary

CVE-2023-6847

GitHub Enterprise Server could allow a remote attacker to bypass security restrictions, caused by an improper authentication vulnerability. By using a specially crafted API request, an attacker could exploit this vulnerability to bypass authentication for public repository data.

Impact

Security Bypass

Indicators Of Compromise

CVE

CVE-2023-6847

Affected Vendors

GitHUB

Affected Products

GitHub Enterprise Server 3.9.6
GitHub Enterprise Server 3.10.3
GitHub Enterprise Server 3.11.0

Remediation

Refer to GitHub Docs Website for patch, upgrade or suggested workaround information.

GitHub Docs Website

Reading this advisory was a good start.

Make it a habit.

Rewterz publishes threat advisories ahead of mainstream cybersecurity media, informed by an AI-Native Autonomous SOC that sees regional threat actor activity in real time. Subscribe to receive each new advisory as it publishes, plus a monthly Middle East threat landscape brief drawn from our own SOC telemetry. For teams evaluating their detection coverage, a 30-minute consultation with a senior analyst is also available, at your pace, when you're ready.

Request a demo