Command Injection Vulnerability in GitHub Enterprise Server Could Lead to Admin SSH Access

CVE-2024-1374

Summary

A command injection vulnerability exists in GitHub Enterprise Server that permits an attacker with an editor role within the Management Console to acquire administrative SSH access to the system. This may occur through the manipulation of nomad templates while setting up audit log forwarding. Successful exploitation demands that the attacker has access to the specific GitHub Enterprise Server instance as well as editor privileges in the Management Console. The vulnerability affects all versions of GitHub Enterprise Server prior to 3.12 and has been addressed in updates 3.11.5, 3.10.7, 3.9.10, and 3.8.15. Further details are documented in the GitHub Bug Bounty program.

References