| |
Vulnerability CVE-2020-0815
Published: 2020-03-12
| Description: |
An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle pipeline job tokens, aka 'Azure DevOps Server and Team Foundation Services Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0758. |
Type:
CWE-269 (Improper Privilege Management)
CVSS2 => (AV:N/AC:M/Au:S/C:P/I:P/A:P)
| CVSS Base Score |
Impact Subscore |
Exploitability Subscore |
6/10 |
6.4/10 |
6.8/10 |
| Exploit range |
Attack complexity |
Authentication |
Remote |
Medium |
Single time |
| Confidentiality impact |
Integrity impact |
Availability impact |
Partial |
Partial |
Partial |
References: |
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0815
|
|
|
Copyright 2024, cxsecurity.com
|
|
|
