Information disclosure

2019-05-1619:29:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.7%

JSON

An information disclosure vulnerability exists when Azure DevOps Server and Microsoft Team Foundation Server do not properly sanitize a specially crafted authentication request to an affected server, aka ‘Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability’.

CPENameOperatorVersion
azure_devops_servereq2019
team_foundation_servereq2018 3.2

CPE	Name	Operator	Version
	azure_devops_server	eq	2019
	team_foundation_server	eq	2018 3.2

References

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0971