Description
An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle pipeline job tokens, aka 'Azure DevOps Server and Team Foundation Services Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0815.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Microsoft Team Foundation Server 2018
Update 1.2affectedUpdate 3.2affected
Microsoft Team Foundation Server
2017 Update 3.1affected
Microsoft Azure DevOps Server
2019.0.1affected
Microsoft Azure DevOps Server 2019
Update 1affected
Microsoft Azure DevOps Server 2019 Update 1.1
unspecifiedaffected