Description
Authentication bypass by assumed-immutable data in Azure DevOps allows an unauthorized attacker to elevate privileges over a network.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Azure DevOps | - | — |
Advisories 1
- MSRC-CVE-2025-47158 Azure DevOps Server Elevation of Privilege Vulnerability Microsoft Security Response Center · Jul 18, 2025
References
- Azure DevOps Server Elevation of Privilege Vulnerability vendor-advisory patch