CVE-2019-0971
An information disclosure vulnerability exists when Azure DevOps Server and Microsoft Team Foundation Server do not properly sanitize a specially crafted authentication request to an affected server, aka 'Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability'.
- Score
- CVSS 3.0 6.5 Medium
- Status
- Modified - secure@microsoft.com
- Published
- 2019-05-16
- Last modified
- 2024-08-04
- Weaknesses
- CWE-116
Affected products
- Azure Devops Server (Microsoft)
- Team Foundation Server (Microsoft)
- Team Foundation Server 2018 (Microsoft)
References
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0971
