Description
Azure DevOps Server Elevation of Privilege Vulnerability
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Azure DevOps Server 2022.0.1 | 2022.0.0 – < 20230926.1 | 20230926.1 |
| Microsoft | Azure DevOps Server 2020.0.2 | 2020.0.0 – < 20230927.1 | 20230927.1 |
| Microsoft | Azure DevOps Server 2020.1.2 | 2020.1.0 – < 20230926.2 | 20230926.2 |
Advisories 3
- WID-SEC-2023-2611 Microsoft Developer Tools: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 7, 2023
- WID-SEC-2023-2612 Microsoft Azure: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 10, 2023
- MSRC-CVE-2023-36561 Azure DevOps Server Elevation of Privilege Vulnerability Microsoft Security Response Center · Oct 10, 2023
References
- Azure DevOps Server Elevation of Privilege Vulnerability vendor-advisory