CVE-2018-8529

Опубликовано: 15 нояб. 2018

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Средний

Описание

A remote code execution vulnerability exists when Team Foundation Server (TFS) does not enable basic authorization on the communication between the TFS and Search services, aka "Team Foundation Server Remote Code Execution Vulnerability." This affects Team.

Ссылки

http://www.securityfocus.com/bid/105910
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8529
Patch
Vendor Advisory
http://www.securityfocus.com/bid/105910
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8529
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microsoft:team_foundation_server:2018:1.1:*:*:*:*:*:*

cpe:2.3:a:microsoft:team_foundation_server:2018:3:*:*:*:*:*:*

EPSS

Процентиль: 97%

0.35738

Средний

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2018-8529

msrc

около 7 лет назад

Team Foundation Server Remote Code Execution Vulnerability

GHSA-g635-3cv2-g7jq

CVSS3: 9.8

github

больше 3 лет назад

BDU:2018-01402

CVSS3: 6.3

fstec