CVE-2019-0971

Name of the Vulnerable Software and Affected Versions Azure DevOps Server and Microsoft Team Foundation Server (affected versions not specified)

Description The issue is related to an information disclosure vulnerability. It occurs when Azure DevOps Server and Microsoft Team Foundation Server do not properly sanitize a specially crafted authentication request to an affected server. This vulnerability may allow a remote attacker to execute arbitrary code and impact the confidentiality, integrity, and availability of protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.