UNKNOWN Microsoft
CVE-2019-1072
Azure DevOps Server and Team Foundation Server Remote Code Execution Vulnerability
Microsoft Security Update 2019-Jul: Azure DevOps Server and Team Foundation Server Remote Code Execution Vulnerability
Affected Products
- Team Foundation Server 2017 Update 3.1
- Team Foundation Server 2018 Update 1.2
- Team Foundation Server 2018 Update 3.2
- Team Foundation Server 2015 Update 4.2
- Team Foundation Server 2012 Update 4
- Team Foundation Server 2013 Update 5
- Azure DevOps Server 2019.0.1
- Team Foundation Server 2010 SP1 (x86)
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-1072
- https://nvd.nist.gov/vuln/detail/CVE-2019-1072
This unknown severity vulnerability was published on 2019-07-09 via Microsoft. EPSS score: 13.5% (top 4% of all CVEs by exploitation probability). Affected: Team Foundation Server 2017 Update 3.1, Team Foundation Server 2018 Update 1.2, Team Foundation Server 2018 Update 3.2 and 5 more.
vulnfeed aggregates 10643 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.