CVE-2020-10517

🗓️ 27 Aug 2020 21:55:16Reported by GitHub_PType

Improper access control vuln in GitHub Enterprise Server allowing authenticated users to determine unauthorized private repo names by numerical IDs

Reporter	Title	Published	Views	Family All 7
Circl	CVE-2020-10517	28 Aug 202002:55	–	circl
Cvelist	CVE-2020-10517 Improper access control in GitHub Enterprise Server leading to the enumeration of private repository names	27 Aug 202021:55	–	cvelist
EUVD	EUVD-2020-2970	7 Oct 202500:30	–	euvd
NVD	CVE-2020-10517	27 Aug 202022:15	–	nvd
OSV	CVE-2020-10517	27 Aug 202022:15	–	osv
Prion	Improper access control	27 Aug 202022:15	–	prion
RedhatCVE	CVE-2020-10517	9 Jan 202609:51	–	redhatcve

NVD

Vulners

Node

github githubRange<2.19.21enterprise

github githubRange2.20.0–2.20.15enterprise

github githubRange2.21.0–2.21.6enterprise

[
  {
    "product": "GitHub Enterprise Server",
    "vendor": "GitHub",
    "versions": [
      {
        "lessThan": "2.21.6",
        "status": "affected",
        "version": "2.21",
        "versionType": "custom"
      },
      {
        "lessThan": "2.20.15",
        "status": "affected",
        "version": "2.20",
        "versionType": "custom"
      },
      {
        "lessThan": "2.19.21",
        "status": "affected",
        "version": "2.19",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
enterprise	www.enterprise.github.com/releases/2.21.6/notes
enterprise	www.enterprise.github.com/releases/2.20.15/notes
enterprise	www.enterprise.github.com/releases/2.19.21/notes

21 Nov 2024 04:55Current

4.5Medium risk

Vulners AI Score4.5

CVSS 24

CVSS 3.14.3

EPSS0.00214

CWE-285