PT-2019-3298

CVE-2019-1306

·

Published

2019-09-10

·

Updated

2020-07-15

Description by

CVSS 2.0
10
Critical
MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Azure DevOps Server and Team Foundation Server (affected versions not specified)
Description A remote code execution issue exists due to improper input validation in Azure DevOps Server and Team Foundation Server. This could allow a remote attacker to execute arbitrary code using a specially crafted file.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-20: Improper Input Validation
Related identifiers
CVE-2019-1306
BDU:2019-03396
ZDI-19-816
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com