CVE-2019-0971

—

CVSS 3.0

6.5 medium

EPSS

8%p95

Published

May 16, 2019 (May 16, 2019)

Modified

Jun 17, 2026

Description

An information disclosure vulnerability exists when Azure DevOps Server and Microsoft Team Foundation Server do not properly sanitize a specially crafted authentication request to an affected server, aka 'Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability'.

Vendors: microsoft
Products: team foundation server, azure devops server
Weakness: CWE-116
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (8.5%)

In the news0 stories

No ingested article mentions this CVE yet.