CVE-2023-36869: Azure DevOps Server Spoofing Vulnerability
First published: Tue Aug 08 2023(Updated: )
Azure DevOps Server Spoofing Vulnerability
Credit: secure@microsoft.com secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Azure DevOps Server 2019.0.1 | ||
| Microsoft Azure DevOps Server | =2019.0.1 | |
| Microsoft Azure DevOps Server | =2019.1.2 | |
| Microsoft Azure DevOps Server | =2020.1.2 | |
| Microsoft Azure DevOps Server | =2022.0.1 | |
| Microsoft Azure DevOps Server 2020.1.2 | ||
| Microsoft Azure DevOps Server 2022.0.1 | ||
| Microsoft Azure DevOps Server 2019.0.1 | ||
| Microsoft Azure DevOps Server 2019.1.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this Azure DevOps Server vulnerability?
The vulnerability ID for this Azure DevOps Server vulnerability is CVE-2023-36869.
What is the severity level of CVE-2023-36869?
The severity level of CVE-2023-36869 is high.
What software versions are affected by CVE-2023-36869?
The affected software versions are Microsoft Azure DevOps Server 2019.0.1, Microsoft Azure DevOps Server 2019.1.2, Microsoft Azure DevOps Server 2020.1.2, and Microsoft Azure DevOps Server 2022.0.1.
How can I fix the Azure DevOps Server Spoofing Vulnerability?
To fix the Azure DevOps Server Spoofing Vulnerability, update to the latest version of Azure DevOps Server. For more information, refer to the official Microsoft Azure DevOps Server release notes.
Where can I find more information about CVE-2023-36869?
You can find more information about CVE-2023-36869 on the Microsoft Security Response Center website.
- collector/msrc
- collector/nvd-index
- agent/author
- agent/type
- collector/msrc-cve
- source/Microsoft
- agent/first-publish-date
- agent/softwarecombine
- agent/title
- agent/remedy
- agent/severity
- agent/references
- agent/software-canonical-lookup
- agent/description
- agent/event
- collector/mitre-cve
- source/MITRE
- collector/nvd-api
- source/NVD
- agent/last-modified-date
- agent/weakness
- agent/tags
- vendor/microsoft
- canonical/microsoft azure devops server 2019.0.1
- canonical/microsoft azure devops server
- version/microsoft azure devops server/2019.0.1
- version/microsoft azure devops server/2019.1.2
- version/microsoft azure devops server/2020.1.2
- version/microsoft azure devops server/2022.0.1
- canonical/microsoft azure devops server 2022.0.1
- canonical/microsoft azure devops server 2020.1.2
- canonical/microsoft azure devops server 2019.1.2