Lucene search

[email protected]NVD:CVE-2021-27067

HistoryApr 13, 2021 - 8:15 p.m.

CVE-2021-27067

2021-04-1320:15:15

[email protected]

web.nvd.nist.gov

azure devops

team foundation

information disclosure

vulnerability

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

0.014

Percentile

86.7%

JSON

Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability

Affected configurations

Nvd

Node

microsoftteam_foundation_serverMatch20154.2

microsoftteam_foundation_serverMatch20173.1

microsoftteam_foundation_serverMatch20181.2

microsoftteam_foundation_serverMatch20183.2

microsoftazure_devops_serverMatch2019update1

microsoftazure_devops_serverMatch2019update1.1

microsoftazure_devops_serverMatch2019.0.1-

microsoftazure_devops_serverMatch2020-

VendorProductVersionCPE
microsoftteam_foundation_server2015cpe:2.3:a:microsoft:team_foundation_server:2015:4.2:*:*:*:*:*:*
microsoftteam_foundation_server2017cpe:2.3:a:microsoft:team_foundation_server:2017:3.1:*:*:*:*:*:*
microsoftteam_foundation_server2018cpe:2.3:a:microsoft:team_foundation_server:2018:1.2:*:*:*:*:*:*
microsoftteam_foundation_server2018cpe:2.3:a:microsoft:team_foundation_server:2018:3.2:*:*:*:*:*:*
microsoftazure_devops_server2019cpe:2.3:o:microsoft:azure_devops_server:2019:update1:*:*:*:*:*:*
microsoftazure_devops_server2019cpe:2.3:o:microsoft:azure_devops_server:2019:update1.1:*:*:*:*:*:*
microsoftazure_devops_server2019.0.1cpe:2.3:o:microsoft:azure_devops_server:2019.0.1:-:*:*:*:*:*:*
microsoftazure_devops_server2020cpe:2.3:o:microsoft:azure_devops_server:2020:-:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	team_foundation_server	2015	cpe:2.3:a:microsoft:team_foundation_server:2015:4.2::::::
microsoft	team_foundation_server	2017	cpe:2.3:a:microsoft:team_foundation_server:2017:3.1::::::
microsoft	team_foundation_server	2018	cpe:2.3:a:microsoft:team_foundation_server:2018:1.2::::::
microsoft	team_foundation_server	2018	cpe:2.3:a:microsoft:team_foundation_server:2018:3.2::::::
microsoft	azure_devops_server	2019	cpe:2.3:o:microsoft:azure_devops_server:2019:update1::::::
microsoft	azure_devops_server	2019	cpe:2.3:o:microsoft:azure_devops_server:2019:update1.1::::::
microsoft	azure_devops_server	2019.0.1	cpe:2.3:o:microsoft:azure_devops_server:2019.0.1:-::::::
microsoft	azure_devops_server	2020	cpe:2.3:o:microsoft:azure_devops_server:2020:-::::::