CVE-2019-1072

EPSS 12.4%

Vexday Risk Score

8Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS —EPSS 12.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

15 jul 2019Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

A remote code execution vulnerability exists when Azure DevOps Server and Team Foundation Server (TFS) improperly handle user input, aka 'Azure DevOps Server and Team Foundation Server Remote Code Execution Vulnerability'.

Produtos afetados

Microsoft · Azure DevOps Server Microsoft · Team Foundation Server Microsoft · Team Foundation Server 2010 Microsoft · Team Foundation Server 2012 Microsoft · Team Foundation Server 2013 Update 5 Microsoft · Team Foundation Server 2015 Microsoft · Team Foundation Server 2018

Referências

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1072