Description
Azure DevOps Server Remote Code Execution Vulnerability
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Azure DevOps Server 2019.0.1 | 2019.0.0 – < 20230601.3 | 20230601.3 |
| Microsoft | Azure DevOps Server 2022.0.1 | 2022.0.0 – < 20230825.4 | 20230825.4 |
| Microsoft | Azure DevOps Server 2020.1.2 | 2020.1.0 – < 20230823.1 | 20230823.1 |
| Microsoft | Azure DevOps Server | 1.0.0 – < 20230825.1 | 20230825.1 |
| Microsoft | Azure DevOps Server 2020.0.2 | 2020.0.0 – < 20230820.2 | 20230820.2 |
Advisories 3
- WID-SEC-2023-2333 Microsoft Developer Tools: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 21, 2023
- WID-SEC-2023-2334 Microsoft Azure: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 12, 2023
- MSRC-CVE-2023-38155 Azure DevOps Server Remote Code Execution Vulnerability Microsoft Security Response Center · Sep 12, 2023
References
- Azure DevOps Server Remote Code Execution Vulnerability vendor-advisory