Vulnerability CVE-2020-0758

Vulnerability CVE-2020-0758

Published: 2020-03-12

Description:

An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle pipeline job tokens, aka 'Azure DevOps Server and Team Foundation Services Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0815.

Type:

CWE-269

(Improper Privilege Management)

CVSS2 => (AV:N/AC:M/Au:S/C:P/I:P/A:P)

CVSS Base Score	Impact Subscore	Exploitability Subscore
6/10	6.4/10	6.8/10

Exploit range	Attack complexity	Authentication
Remote	Medium	Single time
Confidentiality impact	Integrity impact	Availability impact
Partial	Partial	Partial

Affected software
Microsoft -> Team foundation server
Microsoft -> Azure devops server

References:

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0758

Copyright 2024, cxsecurity.com