CVE-2019-0647

CVE-2019-0647 affects Microsoft Team Foundation Server (TFS) and stems from improper handling of variables marked as secret. An authenticated attacker could view other users’ hidden secret variables by creating a task group with a secret-containing task. Affected products include TFS 2017 Update ...

Security Updates for Microsoft Team Foundation Server (January 2019)

The Microsoft Team Foundation Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A cross-site scripting XSS vulnerability exists when Team Foundation Server does not properly sanitize user provided input. An authenticated...

2019 年 1 月のセキュリティ更新プログラム (月例)

2019/01/16 更新: 新たに定例外で公開した Team Foundation Server の脆弱性 CVE-2019-0646/CVE-2019-0647、...