CVE-2020-17145

Azure DevOps Server and Team Foundation Services Spoofing Vulnerability

Score

CVSS 3.1 5.4 Medium

Status

Modified - secure@microsoft.com

Published

2020-12-10

Last modified

2026-06-09

Affected products

• Azure Devops Server (Microsoft)
• Azure Devops Server 2019 (Microsoft)
• Azure Devops Server 2020 (Microsoft)
• Team Foundation Server (Microsoft)
• Team Foundation Server 2015 (Microsoft)
• Team Foundation Server 2017 (Microsoft)
• Team Foundation Server 2018 (Microsoft)

References

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17145
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17145