Severity
Medium
Analysis Summary
CVE-2023-6804
GitHub Enterprise Server could allow a local authenticated attacker to gain elevated privileges on the system, caused by improper privilege management. An attacker could exploit this vulnerability to cause arbitrary workflows to be committed and run using an improperly scoped PAT.
Impact
- Privileges Escalation
Indicators Of Compromise
CVE
- CVE-2023-6804
Affected Vendors
GitHUB
Affected Products
- GitHub Enterprise Server 3.9.6
- GitHub Enterprise Server 3.10.3
- GitHub Enterprise Server 3.11.0
- GitHub Enterprise Server 3.8.11
Remediation
Refer to GitHub Docs Website for patch, upgrade or suggested workaround information.