CVE-2020-0758 - An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle pipeline job tokens, aka 'Azure DevOps Server and Team Foundation Services Elevation of Privilege Vulnerability'

Back Back to CVE browser

HIGH

An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle pipeline job tokens, aka 'Azure DevOps Server and Team Foundation Services Elevation of Privilege Vulnerability'

Published Mar 12, 2020

7.5

HIGH

CVSS 3.1

EPSS 2.02%

Description

An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle pipeline job tokens, aka 'Azure DevOps Server and Team Foundation Services Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0815.

Affected products

Vendor Microsoft Product Azure DevOps Server Default
n/a
- Version
  2019.0.1
  Status
  affected
  Constraints
  -
Vendor Microsoft Product Azure DevOps Server 2019 Default
n/a
- Version
  Update 1
  Status
  affected
  Constraints
  -
Vendor Microsoft Product Azure DevOps Server 2019 Update 1.1 Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  -
Vendor Microsoft Product Team Foundation Server Default
n/a
- Version
  2017 Update 3.1
  Status
  affected
  Constraints
  -
Vendor Microsoft Product Team Foundation Server 2018 Default
n/a
- Version
  Update 1.2
  Status
  affected
  Constraints
  -
- Version
  Update 3.2
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Microsoft

Azure DevOps Server

n/a

Version	Status	Constraints
2019.0.1	affected	-

Microsoft

Azure DevOps Server 2019

n/a

Version	Status	Constraints
Update 1	affected	-

Microsoft

Azure DevOps Server 2019 Update 1.1

n/a

Version	Status	Constraints
unspecified	affected	-

Microsoft

Team Foundation Server

n/a

Version	Status	Constraints
2017 Update 3.1	affected	-

Microsoft

Team Foundation Server 2018

n/a

Version	Status	Constraints
Update 1.2	affected	-
Update 3.2	affected	-

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (1)

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0758
x_refsource_MISCPatchVendor Advisory

Link	Providers	Tags
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0758		x_refsource_MISCPatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner microsoft

Published Mar 12, 2020

Updated Aug 4, 2024

Reserved Nov 4, 2019

Link CVE-2020-0758

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-0758

Red Hat

Severity n/a

Public date n/a

Links CVE-2020-0758