654 matches found
CVE-2021-27067
Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability...
CVE-2021-28459 Azure DevOps Server Spoofing Vulnerability
...
CVE-2021-27067 Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability
...
Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability
...
Azure DevOps Server Spoofing Vulnerability
...
Microsoft Azure DevOps Server cross-site scripting vulnerability
Microsoft Azure DevOps Server is a suite of software development collaboration tools from Microsoft Corporation USA. The product includes features such as code sharing, work tracking, and software distribution. A cross-site scripting vulnerability exists in Microsoft Azure DevOps Server. The...
HTTPS over HTTP: A Supply Chain Attack on Azure DevOps Server 2020
We provide the technical details of a supply chain attack on an improperly configured Azure DevOps Server 2020, specifically in the continuous integration and continuous delivery CI/CD Pipeline Agent communicating without TLS...
Vulnerabilities fixed in Microsoft Developer Tools
Vulnerabilities have been fixed in Windows Developer Tools. The vulnerabilities allow a malicious person to carry out attacks execute attacks that result in the following categories of damage: Remote code execution User privileges. Impersonating another user Access to sensitive data Increased use...
CVE-2021-27067: Undefined Security Weakness
Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability...
PT-2021-2707 · Microsoft · Team Foundation Server +1
Name of the Vulnerable Software and Affected Versions: Azure DevOps Server and Team Foundation Server affected versions not specified Description: The issue is related to errors in handling objects in memory within the Team Foundation Services component of Azure DevOps Server. This can allow a...
PT-2021-2727 · Microsoft · Azure Devops Server
Name of the Vulnerable Software and Affected Versions: Azure DevOps Server affected versions not specified Description: The issue is related to the failure to protect the web page structure, which can lead to cross-site scripting attacks. A remote attacker can exploit this to conduct such attacks...
CVE-2021-28459: Improper Neutralization of Input During Web Page Generation
Azure DevOps Server Spoofing Vulnerability...
Microsoft Azure DevOps Server information leakage vulnerability
Microsoft Azure DevOps Server is a suite of software development collaboration tools from Microsoft Corporation USA. The product includes features such as code sharing, work tracking, and software distribution. An information disclosure vulnerability exists in Azure DevOps Server and Team...
Azure DevOps Server Team Foundation Server Data Compromise
The vulnerability of Azure DevOps Server and Team Foundation Server software lies in improper code generation management. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of protected information from a remote location...
Azure DevOps Server Input Validation
The vulnerability of the Azure DevOps Server software lies in insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protected information...
CVE-2020-17145
Azure DevOps Server and Team Foundation Services Spoofing Vulnerability...
CVE-2020-17145
Azure DevOps Server and Team Foundation Services Spoofing Vulnerability...
CVE-2020-17135
Azure DevOps Server Spoofing Vulnerability...
