Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMicrosoftCVE-2018-8529
HistoryNov 15, 2018 - 7:29 p.m.

CVE-2018-8529

2018-11-1519:29:00
microsoft
web.nvd.nist.gov
35
cve-2018-8529
remote code execution
vulnerability
team foundation server
tfs
basic authorization
search services

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.8

Confidence

High

EPSS

0.072

Percentile

94.1%

JSON

A remote code execution vulnerability exists when Team Foundation Server (TFS) does not enable basic authorization on the communication between the TFS and Search services, aka “Team Foundation Server Remote Code Execution Vulnerability.” This affects Team.

Affected configurations

Nvd
Vulners
Node
microsoftteam_foundation_serverMatch20181.1
OR
microsoftteam_foundation_serverMatch20183
VendorProductVersionCPE
microsoftteam_foundation_server2018cpe:2.3:a:microsoft:team_foundation_server:2018:1.1:*:*:*:*:*:*
microsoftteam_foundation_server2018cpe:2.3:a:microsoft:team_foundation_server:2018:3:*:*:*:*:*:*

CNA Affected

[
  {
    "product": "Team",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "Foundation Server 2018 Update 1.1"
      },
      {
        "status": "affected",
        "version": "Foundation Server 2018 Update 3"
      }
    ]
  }
]

Related

prion 1
mscve 1
cvelist 1
symantec 1
nvd 1
nessus 1
kaspersky 1
thn 1
prion
prion
Remote code execution
2018-11-15 19:29:00
mscve
mscve
Team Foundation Server Remote Code Execution Vulnerability
2018-11-13 08:00:00
cvelist
cvelist
CVE-2018-8529
2018-11-15 19:00:00
symantec
symantec
Microsoft Team Foundation Server CVE-2018-8529 Remote Code Execution Vulnerability
2018-11-13 00:00:00
nvd
nvd
CVE-2018-8529
2018-11-15 19:29:00
nessus
nessus
Security Updates for Microsoft Team Foundation Server (November 2018)
2018-11-16 00:00:00
kaspersky
kaspersky
KLA11358 Multiple vulnerabilities in Microsoft Development Tools
2018-11-13 00:00:00
thn
thn
63 New Flaws (Including 0-Days) Windows Users Need to Patch Now
2018-11-14 09:55:00

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.8

Confidence

High

EPSS

0.072

Percentile

94.1%

JSON
Related for CVE-2018-8529
prion1mscve1cvelist1symantec1nvd1nessus1kaspersky1thn1