Description (CNA)
A remote code execution vulnerability exists when Azure DevOps Server (ADO) and Team Foundation Server (TFS) fail to validate input properly, aka 'Azure DevOps and Team Foundation Server Remote Code Execution Vulnerability'.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Microsoft / Team Foundation Server 2018 | affected Update 3.2 |
| Microsoft / Azure DevOps Server | affected 2019.0.1 |
| Microsoft / Azure DevOps Server 2019 Update 1 | affected unspecified |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.