CVE-2024-6800: Improper Verification of Cryptographic Signature

An XML signature wrapping vulnerability was present in GitHub Enterprise Server GHES when using SAML authentication with specific identity providers utilizing publicly exposed signed federation metadata XML. This vulnerability allowed an attacker with direct network access to GitHub Enterprise...

SAML Metadata Import Errors when Federation Metadata XML file is larger than 64KB

The following messages are observed at the logs: Mar 3 15:55:42 GMT LAB01ADC1 0-PPE-0 : default AAATM Message 1903432 0 : "Parsing sso url"Mar 3 15:55:42 GMT LAB01ADC1 0-PPE-0 : default AAATM Message 1903433 0 : "Parsing sso url"Mar 3 15:55:42 GMT LAB01ADC1 0-PPE-0 : default AAATM Message 1903434...