CVE-2024-2469

An attacker with an Administrator role in GitHub Enterprise Server could gain SSH root access via remote code execution. This vulnerability affected GitHub Enterprise Server version 3.8.0 and above and was fixed in version 3.8.17, 3.9.12, 3.10.9, 3.11.7 and 3.12.1. This vulnerability was reported via the GitHub Bug Bounty program.

• CWE-20

• https://docs.github.com/en/enterprise-server@3.10/admin/release-notes#3.10.9Release Notes
• https://docs.github.com/en/enterprise-server@3.11/admin/release-notes#3.11.7Release Notes
• https://docs.github.com/en/enterprise-server@3.12/admin/release-notes#3.12.1Release Notes
• https://docs.github.com/en/enterprise-server@3.8/admin/release-notes#3.8.17Release Notes
• https://docs.github.com/en/enterprise-server@3.9/admin/release-notes#3.9.12Release Notes
• https://docs.github.com/en/enterprise-server@3.10/admin/release-notes#3.10.9Release Notes
• https://docs.github.com/en/enterprise-server@3.11/admin/release-notes#3.11.7Release Notes
• https://docs.github.com/en/enterprise-server@3.12/admin/release-notes#3.12.1Release Notes
• https://docs.github.com/en/enterprise-server@3.8/admin/release-notes#3.8.17Release Notes
• https://docs.github.com/en/enterprise-server@3.9/admin/release-notes#3.9.12Release Notes

Published

Mar 20, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-24680An issue was discovered in Django 3.2 before 3.2.24, 4.2 bef…7.5
• CVE-2024-24681An issue was discovered in Yealink Configuration Encrypt Too…9.8
• CVE-2024-24683Improper Input Validation vulnerability in Apache Hop Engine…6.5
• CVE-2024-24684Multiple stack-based buffer overflow vulnerabilities exist i…7.8
• CVE-2024-24685Multiple stack-based buffer overflow vulnerabilities exist i…7.8
• CVE-2024-24686Multiple stack-based buffer overflow vulnerabilities exist i…7.8
• CVE-2024-24690Improper input validation in some Zoom clients may allow an …6.5
• CVE-2024-24691Improper input validation in Zoom Desktop Client for Windows…9.8
• CVE-2024-24692Race condition in the installer for Zoom Rooms Client for Wi…4.7
• CVE-2024-24693Improper access control in the installer for Zoom Rooms Clie…5.5
• CVE-2024-24694Improper privilege management in the installer for Zoom Desk…7.8
• CVE-2024-24695Improper input validation in Zoom Desktop Client for Windows…6.5