title: Azure DevOps Server and Team Foundation Services Spoofing Vulnerability
description: Azure DevOps Server and Team Foundation Services Spoofing Vulnerability
problem types: Spoofing
affected:
{
vendor: Microsoft
product: Azure DevOps Server 2019.0.1
cpes: cpe:2.3:o:microsoft:azure_devops_server:2019.0.1:*:*:*:*:*:*:*
platforms: Unknown
versions:
version: 2019.0.0, lessThan: publication, versionType: custom, status: affected
}
{
vendor: Microsoft
product: Team Foundation Server 2017 Update 3.1
cpes: cpe:2.3:a:microsoft:team_foundation_server:2017:3.1:*:*:*:*:*:*
platforms: Unknown
versions:
version: 3.0, lessThan: publication, versionType: custom, status: affected
}
{
vendor: Microsoft
product: Team Foundation Server 2018 Update 1.2
cpes: cpe:2.3:a:microsoft:team_foundation_server:2018:1.2:*:*:*:*:*:*
platforms: Unknown
versions:
version: 1.0, lessThan: publication, versionType: custom, status: affected
}
{
vendor: Microsoft
product: Team Foundation Server 2018 Update 3.2
cpes: cpe:2.3:a:microsoft:team_foundation_server:2018:3.2:*:*:*:*:*:*
platforms: Unknown
versions:
version: 3.0, lessThan: publication, versionType: custom, status: affected
}
{
vendor: Microsoft
product: Team Foundation Server 2015 Update 4.2
cpes: cpe:2.3:a:microsoft:team_foundation_server:2015:4.2:*:*:*:*:*:*
platforms: Unknown
versions:
version: 4.0, lessThan: publication, versionType: custom, status: affected
}
{
vendor: Microsoft
product: Azure DevOps Server 2019 Update 1.1
cpes: cpe:2.3:o:microsoft:azure_devops_server:2019:update1.1:*:*:*:*:*:*
platforms: Unknown
versions:
version: 1.0, lessThan: publication, versionType: custom, status: affected
}
{
vendor: Microsoft
product: Azure DevOps Server 2020
cpes: cpe:2.3:o:microsoft:azure_devops_server:2020:-:*:*:*:*:*:*
platforms: Unknown
versions:
version: 2020, lessThan: publication, versionType: custom, status: affected
}
metrics:
format: CVSS
scenarios: GENERAL
cvssV3_1: [
version: 3.1
baseSeverity: MEDIUM
baseScore: 5.4
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C
]