Description
Authentication bypass by assumed-immutable data in Azure DevOps allows an unauthorized attacker to elevate privileges over a network.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Azure DevOps | - | — |
Advisories 3
- WID-SEC-2025-1015 Microsoft Developer Tools: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 1, 2025
- NCSC-2025-0153 Kwetsbaarheden verholpen in Microsoft Developer Tools NCSC-NL (Netherlands) · May 13, 2025
- MSRC-CVE-2025-29813 Azure DevOps Elevation of Privilege Vulnerability Microsoft Security Response Center · May 8, 2025
References
- Azure DevOps Elevation of Privilege Vulnerability vendor-advisory patch