Read the docs
TI-2020-08450 Aliases CVE-2020-10516GHSA-f436-2f67-fg74

Improper access control in GitHub Enterprise Server leading to privilege escalation of organization member

Priority MEDIUM 45CWE-285Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Security bypass, Information disclosure
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-285 and CWE-552.

Summary

An improper access control vulnerability was identified in the GitHub Enterprise Server API that allowed an organization member to escalate permissions and gain access to unauthorized repositories within an organization. This vulnerability affected all versions of GitHub Enterprise Server prior to 2.21 and was fixed in 2.20.9, 2.19.15, and 2.18.20. This vulnerability was reported via the GitHub Bug Bounty program.

Why it matters now

EPSS 0.01591 75th percentileScored 2026-11-07
Fix Fixed GitHub Enterprise Server (GitHub): 2.20.9, 2.19.15, 2.18.20

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
GitHubGitHub Enterprise Server2.20 to before 2.20.9; 2.19 to before 2.19.15; 2.18 to before 2.18.202.20.9, 2.19.15, 2.18.20Patch availableCNA
  • GitHub Enterprise Server VendorGitHub Affected 2.20 to before 2.20.9; 2.19 to before 2.19.15; 2.18 to before 2.18.20 Fixed in 2.20.9, 2.19.15, 2.18.20 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:github:github:*:*:*:*:enterprise:*:*:*2.18.0 to before 2.18.20; 2.19.0 to before 2.19.15; 2.20.0 to before 2.20.9VulnerableGitHub
  • cpe:2.3:a:github:github:*:*:*:*:enterprise:*:*:* Versions 2.18.0 to before 2.18.20; 2.19.0 to before 2.19.15; 2.20.0 to before 2.20.9 Vulnerable ·GitHub

Remediation

  • Fix · CNA GitHub Enterprise Server (GitHub) Fixed in 2.20.9, 2.19.15, 2.18.20

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-10516
  2. 2026-10-03 Alias added: GHSA-f436-2f67-fg74

References

Advisory 3

  • TI-2017-13538 The Management Console in GitHub Enterprise 2.8.x before 2.8.7 has a deserialization… CVSS 3.0CRITICAL 9.8
  • TI-2020-08453 Unsafe configuration options in GitHub Pages leading to remote code execution on GitHub Enterprise Server CVSS 3.1HIGH 8.8
  • TI-2020-08452 Unsafe configuration options in GitHub Pages leading to remote code execution on GitHub Enterprise Server CVSS 3.1HIGH 8.8
  • TI-2021-05724 Improper authorization in GitHub Enterprise Server CVSS 3.1HIGH 8.1
  • TI-2012-01828 GitHub Enterprise before 20120304 does not properly restrict the use of a hash to provide… CVSS 3.1HIGH 7.5
  • TI-2021-05722 Improper access control in GitHub Enterprise Server leading to unauthorized write access to forkable repositories CVSS 3.1MEDIUM 6.5
See all 8 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences