CVE-2020-0884 - A spoofing vulnerability exists in Microsoft Visual Studio as it includes a reply URL that is not secured by SSL, aka 'Microsoft Visual Studio Spoofing Vulnerability'

Back Back to CVE browser

LOW

A spoofing vulnerability exists in Microsoft Visual Studio as it includes a reply URL that is not secured by SSL, aka 'Microsoft Visual Studio Spoofing Vulnerability'

Published Mar 12, 2020

3.7

LOW

CVSS 3.1

EPSS 1.67%

Description

A spoofing vulnerability exists in Microsoft Visual Studio as it includes a reply URL that is not secured by SSL, aka 'Microsoft Visual Studio Spoofing Vulnerability'.

Affected products

Vendor Microsoft Product Microsoft Visual Studio 2017 version 15.9 (includes 15.1 - 15.8) Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  -
Vendor Microsoft Product Microsoft Visual Studio 2019 Default
n/a
- Version
  16.0
  Status
  affected
  Constraints
  -
Vendor Microsoft Product Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3) Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Microsoft

Microsoft Visual Studio 2017 version 15.9 (includes 15.1 - 15.8)

n/a

Version	Status	Constraints
unspecified	affected	-

Microsoft

Microsoft Visual Studio 2019

n/a

Version	Status	Constraints
16.0	affected	-

Microsoft

Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)

n/a

Version	Status	Constraints
unspecified	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-319

References (1)

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0884
x_refsource_MISCPatchVendor Advisory

Link	Providers	Tags
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0884		x_refsource_MISCPatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner microsoft

Published Mar 12, 2020

Updated Aug 4, 2024

Reserved Nov 4, 2019

Link CVE-2020-0884

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-0884

Red Hat

Severity n/a

Public date n/a

Links CVE-2020-0884