Unscored CVE-2020-0815 EUVD-2020-2299GHSA-pg6g-7pwc-wmq6

An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle pipeline job tokens,…

Published Mar 12, 2020 · Updated Aug 4, 2024 · Assigned by microsoft

Vendor: Microsoft Product: Azure DevOps Server 2019 Update 1.1

Description

An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle pipeline job tokens, aka 'Azure DevOps Server and Team Foundation Services Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0758.

Affected products

Vendor	Product	Affected	Fixed
Microsoft	Azure DevOps Server 2019 Update 1.1	unspecified	—

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0815