Description (CNA)
An information disclosure vulnerability exists when Team Foundation Server does not properly handle variables marked as secret, aka "Team Foundation Server Information Disclosure Vulnerability." This affects Team.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Microsoft / Team | affected Foundation Server 2017 Update 3.1; affected Foundation Server 2018 Update 1.2; affected Foundation Server 2018 Update 3.2 |
CWE
No CWE identifiers supplied.
References
- http://www.securityfocus.com/bid/106650
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0647
ADP enrichment
No English description supplied.