GitHub Patches Critical Flaw in Enterprise Server Allowing Unauthorized Instance Access

GitHub Patches Critical Flaw in Enterprise Server Allowing Unauthorized Instance Access

/in

GitHub has released security updates for Enterprise Server (GHES) to address multiple issues, including a critical bug that could allow unauthorized access to an instance.
The vulnerability, tracked as CVE-2024-9487, carries a CVS score of 9.5 out of a maximum of 10.0
“An attacker could bypass SAML single sign-on (SSO) authentication with the optional encrypted assertions feature, allowing

The Hacker News – ​Read More

North Korea Hackers Get Cash Fast in Linux Cyber HeistsNorth Korea Hackers Get Cash Fast in Linux Cyber HeistsCISA Warns of Active Exploitation in SolarWinds Help Desk Software VulnerabilityCISA Warns of Active Exploitation in SolarWinds Help Desk Software Vulnerab...