CVE-2018-8529

EPSS 13.5%

Vexday Risk Score

8Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS —EPSS 13.5%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

15 nov 2018Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

A remote code execution vulnerability exists when Team Foundation Server (TFS) does not enable basic authorization on the communication between the TFS and Search services, aka "Team Foundation Server Remote Code Execution Vulnerability." This affects Team.

Productos afectados

Microsoft · Team

Referencias

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8529 http://www.securityfocus.com/bid/105910