VulnerabilityModified
CVE-2019-0647
An information disclosure vulnerability exists when Team Foundation Server does not properly handle variables marked as secret, aka "Team Foundation Server Information Disclosure Vulnerability." This affects Team.
MEDIUM 6.5EPSS 4.61%
Does this matter?
Lower severity and a low EPSS score (4.61%). Track it; it rarely justifies an emergency change on its own.
Description
An information disclosure vulnerability exists when Team Foundation Server does not properly handle variables marked as secret, aka "Team Foundation Server Information Disclosure Vulnerability." This affects Team.
- CVSS 3.0
- 6.5 MEDIUMCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 4.61% probability · 91th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-200
- Affected
- microsoft/team foundation server
- Source
- secure@microsoft.com
References
- http://www.securityfocus.com/bid/106650Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0647Patch, Vendor Advisory
- http://www.securityfocus.com/bid/106650Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0647Patch, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.