CyberSecurity Malaysia

1.0 Introduction

Recently, GitHub has released security updates to address multiple vulnerabilities in GitHub Enterprise Server.

2.0 Impact

Successful exploitation of these vulnerabilities may allow a remote attacker to trigger remote code execution and data manipulation on the targeted system. This may lead to execution of arbitrary code, tampering with repository data and system compromise.

3.0 Affected Products

GitHub Enterprise Server versions prior to 3.18.16, 3.19.13, 3.20.9, 3.21.7 and 3.22.2

4.0 Recommendation

CyberSecurity Malaysia encourages users and administrators to review the following GitHub release notes and apply the necessary updates. Users are advised to update to GitHub Enterprise Server versions 3.18.16, 3.19.13, 3.20.9, 3.21.7 or 3.22.2.

Kindly refer to the following URL:

Generally, we advise users to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.

For further enquiries, please contact Cyber999 Incident Response Centre through the following channels:

E-mail: cyber999[at]cybersecurity.my
Phone: 1-300-88-2999 (monitored during business hours)
Mobile: +60 19 2665850 (24x7 call incident reporting)
Business Hours: Mon - Fri 08:30 -17:30 MYT
Web: https://www.cybersecurity.my

5.0 References

Select User Category

Select User Category

Select User Category

Select User Category

Cyber999 Advisories

Multiple Vulnerabilities in GitHub Enterprise Server

Search

Type

Archives