CVEvulnerability

CVE-2020-0815

7.5 HIGH Published 2020-03-12 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2020-03-12
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 ([email protected]): 7.5 HIGH — CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected]): 6.0 MEDIUM — AV:N/AC:M/Au:S/C:P/I:P/A:P

Description

An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle pipeline job tokens, aka 'Azure DevOps Server and Team Foundation Services Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0758.

Affected configurations

• microsoft azure devops server 2019

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0815 Patch, Vendor Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0815 Patch, Vendor Advisory