CVE-2018-8529

EPSS 13.5%

Vexday Risk Score

8Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 13.5%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

15 Nov 2018Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

A remote code execution vulnerability exists when Team Foundation Server (TFS) does not enable basic authorization on the communication between the TFS and Search services, aka "Team Foundation Server Remote Code Execution Vulnerability." This affects Team.

Affected products

Microsoft · Team

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8529 http://www.securityfocus.com/bid/105910