title: Improper Privilege Management allows for arbitrary workflows to be run
description: Improper privilege management allowed arbitrary workflows to be committed and run using an improperly scoped PAT. To exploit this, a workflow must have already existed in the target repo. This vulnerability affected all versions of GitHub Enterprise Server since 3.8 and was fixed in version 3.8.12, 3.9.7, 3.10.4, and 3.11.1.
problem types: CWE-269 Improper Privilege Management
affected:
{
defaultStatus: affected
product: Enterprise Server
vendor: GitHub
versions:
changes: [at: 3.8.12, status: unaffected], lessThanOrEqual: 3.8.11, status: affected, version: 3.8.0, versionType: semver
changes: [at: 3.9.7, status: unaffected], lessThanOrEqual: 3.9.6, status: affected, version: 3.9.0, versionType: semver
changes: [at: 3.10.4, status: unaffected], lessThanOrEqual: 3.10.3, status: affected, version: 3.10.0, versionType: semver
changes: [at: 3.11.1, status: unaffected], lessThanOrEqual: 3.11.0, status: affected, version: 3.11, versionType: semver
}
metrics:
cvssV3_1: [
attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: LOW
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L
version: 3.1
]
format: CVSS
scenarios: GENERAL