CRITICAL GITHUB ENTERPRISE SERVER FLAW ALLOWS AUTHENTICATION BYPASS

Summary from the TLDR InfoSec newsletter

GitHub has addressed a critical authentication bypass vulnerability (CVE-2024-4985) in GitHub Enterprise Server that allowed attackers to gain unauthorized administrative access by forging a SAML response on instances using SAML single sign-on with encrypted assertions enabled.