Imre Rad

Improper Privilege Management in GitHub Enterprise Server management console leads to privilege escalation

An authentication bypass vulnerability was present in the GitHub Enterprise Server (GHES) when utilizing SAML single sign-on authentication with the optional encrypted assertions feature. This vulnerability allowed an attacker to forge a SAML response to