← CVE Intelligence

CVE-2019-1072

Microsoft / Team Foundation Server 2012 PUBLISHED

Description (CNA)

A remote code execution vulnerability exists when Azure DevOps Server and Team Foundation Server (TFS) improperly handle user input, aka 'Azure DevOps Server and Team Foundation Server Remote Code Execution Vulnerability'.

Affected (CNA)

Vendor / productVersions
Microsoft / Team Foundation Server 2012affected Update 4
Microsoft / Team Foundation Server 2013 Update 5affected unspecified
Microsoft / Team Foundation Server 2018affected Update 1.2; affected Update 3.2
Microsoft / Team Foundation Serveraffected 2017 Update 3.1
Microsoft / Team Foundation Server 2015affected Update 4.2
Microsoft / Azure DevOps Serveraffected 2019.0.1
Microsoft / Team Foundation Server 2010affected SP1 (x86); affected SP1 (x64)

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.