Not rated
CVE-2019-1072 A remote code execution vulnerability exists when Azure DevOps Server and Team Foundation Server (TFS) improperly handle…
Description
A remote code execution vulnerability exists when Azure DevOps Server and Team Foundation Server (TFS) improperly handle user input, aka 'Azure DevOps Server and Team Foundation Server Remote Code Execution Vulnerability'.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Team Foundation Server 2012 | Versions not published | |
| Team Foundation Server 2013 Update 5 | Versions not published | |
| Team Foundation Server 2018 | Versions not published | |
| Team Foundation Server | Versions not published | |
| Team Foundation Server 2015 | Versions not published | |
| Azure DevOps Server | 2019.0.1 | No fix stated |
| Team Foundation Server 2010 | Versions not published |