U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Vulnerability Change Records for CVE-2022-23737

Change History

Initial Analysis by NIST 12/05/2022 10:23:08 AM

Action Type Old Value New Value
Added CPE Configuration

								
							
							
						
OR
     *cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:* versions up to (excluding) 3.2.20
     *cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:* versions from (including) 3.3.0 up to (excluding) 3.3.15
     *cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:* versions from (including) 3.4.0 up to (excluding) 3.4.10
     *cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:* versions from (including) 3.5.0 up to (excluding) 3.5.7
     *cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:* versions from (including) 3.6.0 up to (excluding) 3.6.3
Added CVSS V3.1

								
							
							
						
NIST AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Added CWE

								
							
							
						
NIST CWE-269
Changed Reference Type
https://docs.github.com/en/enterprise-server@3.2/admin/release-notes#3.2.20 No Types Assigned
https://docs.github.com/en/enterprise-server@3.2/admin/release-notes#3.2.20 Release Notes, Vendor Advisory
Changed Reference Type
https://docs.github.com/en/enterprise-server@3.3/admin/release-notes#3.3.15 No Types Assigned
https://docs.github.com/en/enterprise-server@3.3/admin/release-notes#3.3.15 Release Notes, Vendor Advisory
Changed Reference Type
https://docs.github.com/en/enterprise-server@3.4/admin/release-notes#3.4.10 No Types Assigned
https://docs.github.com/en/enterprise-server@3.4/admin/release-notes#3.4.10 Release Notes, Vendor Advisory
Changed Reference Type
https://docs.github.com/en/enterprise-server@3.5/admin/release-notes#3.5.7 No Types Assigned
https://docs.github.com/en/enterprise-server@3.5/admin/release-notes#3.5.7 Release Notes, Vendor Advisory
Changed Reference Type
https://docs.github.com/en/enterprise-server@3.6/admin/release-notes#3.6.3 No Types Assigned
https://docs.github.com/en/enterprise-server@3.6/admin/release-notes#3.6.3 Release Notes, Vendor Advisory