CVE Catalog

CVE-2023-36869

MediumCVSS 6.3
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.65%

46th percentile - higher than 46% of all known CVEs

Summary

A vulnerability in Azure DevOps Server allows attackers to spoof users, potentially leading to unauthorized access to resources.

Risk Assessment

Organizations may be exposed to unauthorized actions, which could result in data loss or security breaches.

Recommendation

It is recommended to update to the latest version of Azure DevOps Server to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

Azure DevOps Server Spoofing Vulnerability

Vulnerability data from NVD (NIST) · CISA KEV · EPSS