PT-2019-1828

CVE-2019-0869

·

Published

2019-04-09

·

Updated

2020-08-24

Description by

CVSS 3.1
6.1
Medium
MetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Azure DevOps Server (affected versions not specified)
Description The issue exists due to the failure to neutralize special elements, which can be exploited by a remote attacker using a specially crafted link to impact the confidentiality and integrity of protected information. This is related to a spoofing vulnerability when the software fails to properly handle web requests.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾