U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Vulnerability Change Records for CVE-2022-46256

Change History

Initial Analysis by NIST 12/16/2022 4:17:04 PM

Action Type Old Value New Value
Added CPE Configuration

								
							
							
						
OR
     *cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:* versions up to (excluding) 3.3.17
     *cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:* versions from (including) 3.4.0 up to (excluding) 3.4.12
     *cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:* versions from (including) 3.5.0 up to (excluding) 3.5.9
     *cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:* versions from (including) 3.6.0 up to (excluding) 3.6.5
     *cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:* versions from (including) 3.7.0 up to (excluding) 3.7.2
Added CVSS V3.1

								
							
							
						
NIST AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Added CWE

								
							
							
						
NIST CWE-22
Changed Reference Type
https://docs.github.com/en/enterprise-server@3.3/admin/release-notes#3.3.17 No Types Assigned
https://docs.github.com/en/enterprise-server@3.3/admin/release-notes#3.3.17 Release Notes, Vendor Advisory
Changed Reference Type
https://docs.github.com/en/enterprise-server@3.4/admin/release-notes#3.4.12 No Types Assigned
https://docs.github.com/en/enterprise-server@3.4/admin/release-notes#3.4.12 Release Notes, Vendor Advisory
Changed Reference Type
https://docs.github.com/en/enterprise-server@3.5/admin/release-notes#3.5.9 No Types Assigned
https://docs.github.com/en/enterprise-server@3.5/admin/release-notes#3.5.9 Release Notes, Vendor Advisory
Changed Reference Type
https://docs.github.com/en/enterprise-server@3.6/admin/release-notes#3.6.5 No Types Assigned
https://docs.github.com/en/enterprise-server@3.6/admin/release-notes#3.6.5 Release Notes, Vendor Advisory
Changed Reference Type
https://docs.github.com/en/enterprise-server@3.7/admin/release-notes#3.7.2 No Types Assigned
https://docs.github.com/en/enterprise-server@3.7/admin/release-notes#3.7.2 Release Notes, Vendor Advisory