Description
A remote code execution vulnerability exists when Azure DevOps Server and Team Foundation Server (TFS) improperly handle user input, aka 'Azure DevOps Server and Team Foundation Server Remote Code Execution Vulnerability'.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Team Foundation Server 2012 | Update 4 | — |
| Microsoft | Team Foundation Server 2013 Update 5 | unspecified | — |
| Microsoft | Team Foundation Server 2018 | Update 1.2, Update 3.2 | — |
| Microsoft | Team Foundation Server | 2017 Update 3.1 | — |
| Microsoft | Team Foundation Server 2015 | Update 4.2 | — |
| Microsoft | Azure DevOps Server | 2019.0.1 | — |
| Microsoft | Team Foundation Server 2010 | SP1 (x86), SP1 (x64) | — |