Remote code execution

2019-07-1519:15:00

PRIOn knowledge base

www.prio-n.com

9.8 High

AI Score

Confidence

High

0.032 Low

EPSS

Percentile

91.2%

JSON

A remote code execution vulnerability exists when Azure DevOps Server and Team Foundation Server (TFS) improperly handle user input, aka ‘Azure DevOps Server and Team Foundation Server Remote Code Execution Vulnerability’.

CPENameOperatorVersion
azure_devops_servereq2019.0.1
team_foundation_servereq2018 3.2
team_foundation_servereq2018 1.2
team_foundation_servereq2017 3.1
team_foundation_servereq2015 4.2
team_foundation_servereq2010 sp1
team_foundation_servereq2012 4
team_foundation_servereq2013 5

Name	Operator	Version
azure_devops_server	eq	2019.0.1
team_foundation_server	eq	2018 3.2
team_foundation_server	eq	2018 1.2
team_foundation_server	eq	2017 3.1
team_foundation_server	eq	2015 4.2
team_foundation_server	eq	2010 sp1
team_foundation_server	eq	2012 4
team_foundation_server	eq	2013 5