{"id":"CVE-2019-1306","state":"PUBLISHED","title":"A remote code execution vulnerability exists when Azure DevOps Server (ADO) and Team Foundation Server (TFS) fail to validate input properly, aka 'Azure DevOps and Team Foundation ","description":"A remote code execution vulnerability exists when Azure DevOps Server (ADO) and Team Foundation Server (TFS) fail to validate input properly, aka 'Azure DevOps and Team Foundation Server Remote Code Execution Vulnerability'.","publishedAt":"2019-09-11T21:25:01.000Z","updatedAt":"2024-08-04T18:13:30.435Z","severity":null,"assigner":"microsoft","products":["Microsoft Team Foundation Server 2018","Microsoft Azure DevOps Server","Microsoft Azure DevOps Server 2019 Update 1"],"affected":[{"vendor":"Microsoft","product":"Team Foundation Server 2018","versions":[{"version":"Update 3.2","status":"affected"}]},{"vendor":"Microsoft","product":"Azure DevOps Server","versions":[{"version":"2019.0.1","status":"affected"}]},{"vendor":"Microsoft","product":"Azure DevOps Server 2019 Update 1","versions":[{"version":"unspecified","status":"affected"}]}],"references":["https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1306"],"weaknesses":[],"ingestedAt":"2026-10-29T19:45:46.792Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2019/1xxx/CVE-2019-1306.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2019-1306","state":"PUBLISHED","datePublished":"2019-09-11T21:25:01.000Z","dateUpdated":"2024-08-04T18:13:30.435Z","assignerShortName":"microsoft","assignerOrgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","dateReserved":"2018-11-26T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A remote code execution vulnerability exists when Azure DevOps Server (ADO) and Team Foundation Server (TFS) fail to validate input properly, aka 'Azure DevOps and Team Foundation Server Remote Code Execution Vulnerability'."}],"affected":[{"vendor":"Microsoft","product":"Team Foundation Server 2018","versions":[{"version":"Update 3.2","status":"affected"}]},{"vendor":"Microsoft","product":"Azure DevOps Server","versions":[{"version":"2019.0.1","status":"affected"}]},{"vendor":"Microsoft","product":"Azure DevOps Server 2019 Update 1","versions":[{"version":"unspecified","status":"affected"}]}],"references":[{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1306","tags":["x_refsource_MISC"]}],"problemTypes":[{"descriptions":[{"description":"Remote Code Execution","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"microsoft","dateUpdated":"2019-09-11T21:25:01.000Z","orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"secure@microsoft.com","ID":"CVE-2019-1306","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Team Foundation Server 2018","version":{"version_data":[{"version_value":"Update 3.2"}]}},{"product_name":"Azure DevOps Server","version":{"version_data":[{"version_value":"2019.0.1"}]}},{"product_name":"Azure DevOps Server 2019 Update 1","version":{"version_data":[{"version_value":""}]}}]},"vendor_name":"Microsoft"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"A remote code execution vulnerability exists when Azure DevOps Server (ADO) and Team Foundation Server (TFS) fail to validate input properly, aka 'Azure DevOps and Team Foundation Server Remote Code Execution Vulnerability'."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Remote Code Execution"}]}]},"references":{"reference_data":[{"name":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1306","refsource":"MISC","url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1306"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1306","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T18:13:30.435Z"}}]}}}