CVEvulnerability

CVE-2019-1072

9.8 CRITICAL Published 2019-07-15 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-07-15
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-20

Description

A remote code execution vulnerability exists when Azure DevOps Server and Team Foundation Server (TFS) improperly handle user input, aka 'Azure DevOps Server and Team Foundation Server Remote Code Execution Vulnerability'.

Affected configurations

• microsoft team foundation server 2010 • microsoft team foundation server 2012 • microsoft team foundation server 2013 • microsoft team foundation server 2015 • microsoft team foundation server 2017 • microsoft team foundation server 2018 • microsoft azure devops server 2019.0.1

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References