Lucene search

CVE-2022-46257

🗓️ 07 Mar 2023 17:12:15Reported by GitHub_PType

Information disclosure vulnerability in GitHub Enterprise Server allows unauthorized addition of private repositories to GitHub Actions runner group, exposing repository names in UI. Exploitation requires instance access, permissions to modify runner groups, and guessing repository IDs

Reporter	Title	Published	Views	Family All 4
Cvelist	CVE-2022-46257 Information disclosure in GitHub Enterprise Server leading to unauthorized viewing of private repository names	7 Mar 202300:00	–	cvelist
Vulnrichment	CVE-2022-46257 Information disclosure in GitHub Enterprise Server leading to unauthorized viewing of private repository names	7 Mar 202300:00	–	vulnrichment
NVD	CVE-2022-46257	7 Mar 202317:15	–	nvd
Prion	Information disclosure	7 Mar 202317:15	–	prion

Nvd

Vulners

Node

github enterprise_serverRange3.3.0–3.3.17

github enterprise_serverRange3.4.0–3.4.12

github enterprise_serverRange3.5.0–3.5.9

github enterprise_serverRange3.6.0–3.6.5

[
  {
    "vendor": "GitHub",
    "product": "GitHub Enterprise Server",
    "versions": [
      {
        "version": "3.3",
        "status": "affected",
        "lessThan": "3.3.17",
        "versionType": "custom"
      },
      {
        "version": "3.4",
        "status": "affected",
        "lessThan": "3.4.12",
        "versionType": "custom"
      },
      {
        "version": "3.5",
        "status": "affected",
        "lessThan": "3.5.9",
        "versionType": "custom"
      },
      {
        "version": "3.6",
        "status": "affected",
        "lessThan": "3.6.5",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
docs	www.docs.github.com/en/enterprise-server%403.5/admin/release-notes
docs	www.docs.github.com/en/enterprise-server%403.6/admin/release-notes
docs	www.docs.github.com/en/enterprise-server%403.4/admin/release-notes
docs	www.docs.github.com/en/enterprise-server%403.3/admin/release-notes

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

07 Mar 2023 17:15Current

4.2Medium risk

Vulners AI Score4.2

CVSS34.3

EPSS0.00051

SSVC