CVE-2019-0971

No fix known EPSS 8%

An information disclosure vulnerability exists when Azure DevOps Server and Microsoft Team Foundation Server do not properly sanitize a specially crafted authentication request to an affected server, aka 'Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability'.

Published 2019-05-16 · CVE record · OSV

Products: Microsoft Team Foundation Server 2018, Microsoft Azure DevOps Server