Vulnerability CVE-2019-0971

Vulnerability CVE-2019-0971

Published: 2019-05-16

Description:

An information disclosure vulnerability exists when Azure DevOps Server and Microsoft Team Foundation Server do not properly sanitize a specially crafted authentication request to an affected server, aka 'Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability'.

Type:

CWE-200

(Information Exposure)

CVSS2 => (AV:N/AC:L/Au:S/C:C/I:C/A:C)

CVSS Base Score	Impact Subscore	Exploitability Subscore
9/10	10/10	8/10

Exploit range	Attack complexity	Authentication
Remote	Low	Single time
Confidentiality impact	Integrity impact	Availability impact
Complete	Complete	Complete

Affected software
Microsoft -> Team foundation server
Microsoft -> Azure devops server 2019
Microsoft -> Azure devops server

References:

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0971

Copyright 2024, cxsecurity.com