Azure DevOps Server and Team Foundation Services Spoofing Vulnerability
CVE-2020-17145

5.4MEDIUM

Key Information:

Vendor: Microsoft
Status: Azure Devops Server 2019.0.1; Team Foundation Server 2017 Update 3.1; Team Foundation Server 2018 Update 1.2; Team Foundation Server 2018 Update 3.2
Vendor: CVE Published:; 10 December 2020

🔔 Create Microsoft Vulnerability Alert

What is CVE-2020-17145?

Azure DevOps Server and Team Foundation Services Spoofing Vulnerability

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Azure DevOps Server 2019 Update 1.1 Unknown 1.0

Azure DevOps Server 2019.0.1 Unknown 2019.0.0

Azure DevOps Server 2020 Unknown 2020

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...

vendor-advisory

CVSS V3.1

Score:

5.4

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

Required

Scope:

Changed

Timeline

Vulnerability published
Dec 10, 2020
Vulnerability Reserved
Aug 4, 2020

JSON

Microsoft