An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle pipeline job tokens, aka 'Azure DevOps Server and Team Foundation Services Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0815.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Team Foundation Server 2018
Vendor
Microsoft
Product
Team Foundation Server 2018
Platforms
Unknown
Default status
Unknown
Team Foundation Server 2018 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
Update 1.2
affected
Unavailable
Unavailable
Unavailable
None listed
Update 3.2
affected
Unavailable
Unavailable
Unavailable
None listed
Team Foundation Server
Vendor
Microsoft
Product
Team Foundation Server
Platforms
Unknown
Default status
Unknown
Team Foundation Server · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2017 Update 3.1
affected
Unavailable
Unavailable
Unavailable
None listed
Azure DevOps Server
Vendor
Microsoft
Product
Azure DevOps Server
Platforms
Unknown
Default status
Unknown
Azure DevOps Server · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2019.0.1
affected
Unavailable
Unavailable
Unavailable
None listed
Azure DevOps Server 2019
Vendor
Microsoft
Product
Azure DevOps Server 2019
Platforms
Unknown
Default status
Unknown
Azure DevOps Server 2019 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
Update 1
affected
Unavailable
Unavailable
Unavailable
None listed
Azure DevOps Server 2019 Update 1.1
Vendor
Microsoft
Product
Azure DevOps Server 2019 Update 1.1
Platforms
Unknown
Default status
Unknown
Azure DevOps Server 2019 Update 1.1 · Scoped product and version facts