CVE-2024-3470

Summary

CVE-2024-3470 is an Improper Privilege Management vulnerability discovered in GitHub Enterprise Server. This issue allowed attackers to bypass an organization's ruleset using a deploy key, requiring both access to a valid deploy key for a repository and repository administrator privileges. Affecting versions 3.11 to 3.12, it was addressed in versions 3.11.8 and 3.12.2. This vulnerability was reported via the GitHub Bug Bounty program.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.