CVE-2019-0971 - An information disclosure vulnerability exists when Azure DevOps Server and Microsoft Team Foundation Server do not properly sanitize a specially crafted authentication request to an affected server, aka 'Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability'

Back Back to CVE browser

MEDIUM

An information disclosure vulnerability exists when Azure DevOps Server and Microsoft Team Foundation Server do not properly sanitize a specially crafted authentication request to an affected server, aka 'Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability'

Published May 16, 2019

6.5

MEDIUM

CVSS 3.0

EPSS 8.46%

Description

An information disclosure vulnerability exists when Azure DevOps Server and Microsoft Team Foundation Server do not properly sanitize a specially crafted authentication request to an affected server, aka 'Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability'.

Affected products

Vendor Microsoft Product Azure DevOps Server Default
unknown
Affected
- 2019
Vendor Microsoft Product Team Foundation Server 2018 Default
unknown
Affected
- Update 3.2

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Microsoft	Azure DevOps Server	unknown	Affected 2019
Microsoft	Team Foundation Server 2018	unknown	Affected Update 3.2

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-116

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-1706
Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0971
x_refsource_MISCPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-1706		Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0971		x_refsource_MISCPatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner microsoft

Published May 16, 2019

Updated Aug 4, 2024

Reserved Nov 26, 2018

Link CVE-2019-0971

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-0971

Red Hat

No data

ENISA EUVD

Assigner microsoft

Published May 16, 2019

Updated Aug 4, 2024

Link EUVD-2019-1706

GitHub

No data