CVE-2024-4985

An authentication bypass vulnerability was present in the GitHub Enterprise Server (GHES) when utilizing SAML single sign-on authentication with the optional encrypted assertions feature. This vulnerability allowed an attacker to forge a SAML response to provision and/or gain access to a user with site administrator privileges. Exploitation of this vulnerability would allow unauthorized access to the instance without requiring prior authentication. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.13.0 and was fixed in versions 3.9.15, 3.10.12, 3.11.10 and 3.12.4. This vulnerability was reported via the GitHub Bug Bounty program.

• CWE-303

• https://docs.github.com/en/enterprise-server@3.10/admin/release-notes#3.10.12Release Notes
• https://docs.github.com/en/enterprise-server@3.11/admin/release-notes#3.11.10Release Notes
• https://docs.github.com/en/enterprise-server@3.12/admin/release-notes#3.12.4Release Notes
• https://docs.github.com/en/enterprise-server@3.9/admin/release-notes#3.9.15Release Notes
• https://docs.github.com/en/enterprise-server@3.10/admin/release-notes#3.10.12Release Notes
• https://docs.github.com/en/enterprise-server@3.11/admin/release-notes#3.11.10Release Notes
• https://docs.github.com/en/enterprise-server@3.12/admin/release-notes#3.12.4Release Notes
• https://docs.github.com/en/enterprise-server@3.9/admin/release-notes#3.9.15Release Notes

Published

May 20, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-49844Memory corruption while triggering commands in the PlayReady…7.8
• CVE-2024-49845Memory corruption during the FRS UDS generation process.7.8
• CVE-2024-49846Memory corruption while decoding of OTA messages from T3448 …9.1
• CVE-2024-49847Transient DOS while processing of a registration acceptance …7.5
• CVE-2024-49848Memory corruption while processing multiple IOCTL calls from…6.7
• CVE-2024-49849A vulnerability has been identified in SIMATIC S7-PLCSIM V16…8.4
• CVE-2024-49850In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-49851In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-49852In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2024-49853In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2024-49854In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2024-49855In the Linux kernel, the following vulnerability has been re…7