Azure SDK for C Security Feature Bypass Vulnerability

CVE-2020-17002 is an elevation of privilege vulnerability in Azure DevOps (rated Important, CVSS 7.4).

1 version

Microsoft id: CVE-2020-17002
Products: Azure DevOps
Severity: Important
Impact: Elevation of Privilege
CVSS: 7.4
CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C
Exploited: No
Publicly disclosed: No
Exploitability: Exploitation Less Likely
Customer action required: Yes
Release: 2020-Dec
Assigned by: Microsoft
MSRC revision: 2.0
Status pages: Azure DevOps status
First captured by us: 13 Nov 2026, 15:37 UTC (from our first import of this list)
Microsoft last modified: 10 Dec 2020, 08:00 UTC
Source: Security updates · open the original at Microsoft

Microsoft's revision notes

Revision 1.0, 2020-12-08: Information published.
Revision 2.0, 2020-12-10: In the Security Updates table, added the following: azure-c-shared-utility Release LTS_07_2020 and LTS_02_2020; C SDK for Azure IoT Release LTS_07_2020 and LTS_02_2020; all supported releases…

Microsoft published no description with this item.

One version so far. If Microsoft edits it, each change shows here with what was removed and added.

First version we captured · 15:37 UTC, 13 Nov
The text as we first saw it
Seen by us 15:37 UTC, 13 Nov · Microsoft's timestamp 08:00 UTC, 10 Dec 2020 · Microsoft's page

Last updated 13 Nov 2026, 15:37 UTC