U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Vulnerability Change Records for CVE-2022-23738

Change History

Initial Analysis by NIST 11/02/2022 11:34:09 AM

Action Type Old Value New Value
Added CPE Configuration

								
							
							
						
OR
     *cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:* versions from (including) 3.2.0 up to (excluding) 3.2.20
     *cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:* versions from (including) 3.3.0 up to (excluding) 3.3.15
     *cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:* versions from (including) 3.4.0 up to (excluding) 3.4.10
     *cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:* versions from (including) 3.5.0 up to (excluding) 3.5.7
     *cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:* versions from (including) 3.6.0 up to (excluding) 3.6.3
Added CVSS V3.1

								
							
							
						
NIST AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
Added CWE

								
							
							
						
NIST CWE-552
Changed Reference Type
https://docs.github.com/en/enterprise-server@3.2/admin/release-notes#3.2.20 No Types Assigned
https://docs.github.com/en/enterprise-server@3.2/admin/release-notes#3.2.20 Patch, Release Notes, Third Party Advisory
Changed Reference Type
https://docs.github.com/en/enterprise-server@3.3/admin/release-notes#3.3.15 No Types Assigned
https://docs.github.com/en/enterprise-server@3.3/admin/release-notes#3.3.15 Patch, Release Notes, Third Party Advisory
Changed Reference Type
https://docs.github.com/en/enterprise-server@3.4/admin/release-notes#3.4.10 No Types Assigned
https://docs.github.com/en/enterprise-server@3.4/admin/release-notes#3.4.10 Patch, Release Notes, Third Party Advisory
Changed Reference Type
https://docs.github.com/en/enterprise-server@3.5/admin/release-notes#3.5.7 No Types Assigned
https://docs.github.com/en/enterprise-server@3.5/admin/release-notes#3.5.7 Patch, Release Notes, Third Party Advisory
Changed Reference Type
https://docs.github.com/en/enterprise-server@3.6/admin/release-notes#3.6.3 No Types Assigned
https://docs.github.com/en/enterprise-server@3.6/admin/release-notes#3.6.3 Patch, Release Notes, Third Party Advisory