Skip to content
OpenAdvisories
Medium · 5.4 CVE-2020-17145 EUVD-2020-9099GHSA-8frx-3j37-5wj8

Azure DevOps Server and Team Foundation Services Spoofing Vulnerability

Published Dec 9, 2020 · Updated Jun 9, 2026 · Assigned by microsoft

Vendor: Microsoft Product: Azure DevOps Server 2019 Update 1.1 Product: Azure DevOps Server 2019.0.1 Product: Azure DevOps Server 2020 Product: Team Foundation Server 2015 Update 4.2 Product: Team Foundation Server 2017 Update 3.1 Product: Team Foundation Server 2018 Update 1.2 Product: Team Foundation Server 2018 Update 3.2

Description

Azure DevOps Server and Team Foundation Services Spoofing Vulnerability

Affected products

VendorProductAffectedFixed
Microsoft Azure DevOps Server 2019 Update 1.1 1.0 – < publication publication
Microsoft Azure DevOps Server 2019.0.1 2019.0.0 – < publication publication
Microsoft Azure DevOps Server 2020 2020 – < publication publication
Microsoft Team Foundation Server 2015 Update 4.2 4.0 – < publication publication
Microsoft Team Foundation Server 2017 Update 3.1 3.0 – < publication publication
Microsoft Team Foundation Server 2018 Update 1.2 1.0 – < publication publication
Microsoft Team Foundation Server 2018 Update 3.2 3.0 – < publication publication

References