Improper Access Control in GitHub Enterprise Server by GitHub

CVE-2023-46646

What is CVE-2023-46646?

An improper access control vulnerability exists in all versions of GitHub Enterprise Server, potentially allowing unauthorized users to see the names of private repositories through the 'Get a check run' API endpoint. While this exposure does not provide unauthorized access to repository content, it compromises the confidentiality of repository names. This issue affects GitHub Enterprise Server starting from version 3.7.0 and was remedied in subsequent releases including versions 3.17.19, 3.8.12, 3.9.7, 3.10.4, and 3.11.0.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References