vulnerability report on Git

[AZHockeyNut]

https://www.securityweek.com/remote-code-execution-vulnerability-patched-git

remote code execution bug with Git/MSTFS anyone have a report on it?

[AZHockeyNut]

thanks!!!!

[Esben_D · Accepted solution]

This report should work.

Based on the information linked, any Git version below 2.17.1 is vulnerable. The report below shows any assets with Git on it that does not have version 2.17.1.
This does mean that you if new updates comes out, the higher release versions will also be displayed.

Select Top 1000000 tblAssets.AssetID,
  tblAssets.AssetName,
  tblAssets.Domain,
  tblAssets.Username,
  tblAssets.Userdomain,
  Coalesce(tsysOS.Image, tsysAssetTypes.AssetTypeIcon10) As icon,
  tblAssets.IPAddress,
  tsysIPLocations.IPLocation,
  tblAssetCustom.Manufacturer,
  tblAssetCustom.Model,
  tsysOS.OSname As OS,
  tblAssets.SP,
  tblAssets.Lastseen,
  tblAssets.Lasttried,
  tblSoftwareUni.softwareName As Software,
  tblSoftware.softwareVersion As Version,
  tblSoftwareUni.SoftwarePublisher As Publisher,
  tblSoftware.Lastchanged
From tblAssets
  Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
  Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype
  Inner Join tsysIPLocations On tsysIPLocations.LocationID =
    tblAssets.LocationID
  Inner Join tblState On tblState.State = tblAssetCustom.State
  Inner Join tblSoftware On tblAssets.AssetID = tblSoftware.AssetID
  Inner Join tblSoftwareUni On tblSoftwareUni.SoftID = tblSoftware.softID
  Left Join tsysOS On tsysOS.OScode = tblAssets.OScode
Where tblSoftwareUni.softwareName = 'Git version%' And
  tblSoftware.softwareVersion Not Like '2.17.1%' And tblState.Statename =
  'Active'
Order By tblAssets.Domain,
  tblAssets.AssetName,
  Software