Description (CNA)
An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle pipeline job tokens, aka 'Azure DevOps Server and Team Foundation Services Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0815.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Microsoft / Team Foundation Server 2018 | affected Update 1.2; affected Update 3.2 |
| Microsoft / Team Foundation Server | affected 2017 Update 3.1 |
| Microsoft / Azure DevOps Server | affected 2019.0.1 |
| Microsoft / Azure DevOps Server 2019 | affected Update 1 |
| Microsoft / Azure DevOps Server 2019 Update 1.1 | affected unspecified |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.