CVE-2023-23767

Rejected reason: This CVE ID has been rejected or withdrawn by GitHub as it was issued in error.
CVSS

No CVSS.

References

No reference.

Configurations

No configuration.

History

08 Nov 2023, 16:15

Type Values Removed Values Added
References
  • {'url': 'https://docs.github.com/en/enterprise-server@3.7/admin/release-notes#3.7.18', 'name': 'https://docs.github.com/en/enterprise-server@3.7/admin/release-notes#3.7.18', 'tags': ['Release Notes'], 'refsource': 'MISC'}
  • {'url': 'https://docs.github.com/en/enterprise-server@3.8/admin/release-notes#3.8.11', 'name': 'https://docs.github.com/en/enterprise-server@3.8/admin/release-notes#3.8.11', 'tags': ['Release Notes'], 'refsource': 'MISC'}
  • {'url': 'https://docs.github.com/en/enterprise-server@3.10/admin/release-notes#3.10.3', 'name': 'https://docs.github.com/en/enterprise-server@3.10/admin/release-notes#3.10.3', 'tags': ['Release Notes'], 'refsource': 'MISC'}
  • {'url': 'https://docs.github.com/en/enterprise-server@3.9/admin/release-notes#3.9.6', 'name': 'https://docs.github.com/en/enterprise-server@3.9/admin/release-notes#3.9.6', 'tags': ['Release Notes'], 'refsource': 'MISC'}
CVSS v2 : unknown
v3 : 2.3
v2 : unknown
v3 : unknown
CPE cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:*
Summary Incorrect Permission Assignment for Critical Resource in GitHub Enterprise Server that allowed local operating system user accounts to read MySQL connection details including the MySQL password via configuration files. This vulnerability affected all versions of GitHub Enterprise Server and was fixed in versions 3.7.18, 3.8.11, 3.9.6, and 3.10.3. Rejected reason: This CVE ID has been rejected or withdrawn by GitHub as it was issued in error.
CWE CWE-732

31 Oct 2023, 16:37

Type Values Removed Values Added
References (MISC) https://docs.github.com/en/enterprise-server@3.7/admin/release-notes#3.7.18 - (MISC) https://docs.github.com/en/enterprise-server@3.7/admin/release-notes#3.7.18 - Release Notes
References (MISC) https://docs.github.com/en/enterprise-server@3.8/admin/release-notes#3.8.11 - (MISC) https://docs.github.com/en/enterprise-server@3.8/admin/release-notes#3.8.11 - Release Notes
References (MISC) https://docs.github.com/en/enterprise-server@3.10/admin/release-notes#3.10.3 - (MISC) https://docs.github.com/en/enterprise-server@3.10/admin/release-notes#3.10.3 - Release Notes
References (MISC) https://docs.github.com/en/enterprise-server@3.9/admin/release-notes#3.9.6 - (MISC) https://docs.github.com/en/enterprise-server@3.9/admin/release-notes#3.9.6 - Release Notes
CPE cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:*
CWE CWE-732
First Time Github enterprise Server
Github
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 2.3

25 Oct 2023, 18:17

Type Values Removed Values Added
New CVE

Information

Published : 2023-10-25 18:17

Updated : 2024-04-16 18:27


NVD link : CVE-2023-23767

Mitre link : CVE-2023-23767

CVE.ORG link : CVE-2023-23767


JSON object : View

Products Affected

No product.

CWE

No CWE.