CVE-2020-0884

A spoofing vulnerability exists in Microsoft Visual Studio as it includes a reply URL that is not secured by SSL, aka 'Microsoft Visual Studio Spoofing Vulnerability'.

Score

CVSS 3.1 3.7 Low

Status

Modified - secure@microsoft.com

Published

2020-03-12

Last modified

2024-08-04

Weaknesses

CWE-319

Affected products

• Microsoft Visual Studio 2017 Version 15.9 Includes 15.1 - 15.8 (Microsoft)
• Microsoft Visual Studio 2019 (Microsoft)
• Microsoft Visual Studio 2019 Version 16.4 Includes 16.0 - 16.3 (Microsoft)
• Visual Studio 2017 (Microsoft)
• Visual Studio 2019 (Microsoft)

References

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0884