What’s Vulnerable › Vulnerabilities

CVE-2019-0647

• Severity: medium (CVSS 6.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-01-17 · updated 2026-06-17
• Weakness: CWE-200

Description

An information disclosure vulnerability exists when Team Foundation Server does not properly handle variables marked as secret, aka "Team Foundation Server Information Disclosure Vulnerability." This affects Team.

Affected products

• Microsoft Team Foundation Server 2018: 2017-3.1, 2018-1.2, 2018-3.2
• Microsoft Team: Foundation Server 2017 Update 3.1, Foundation Server 2018 Update 1.2, Foundation Server 2018 Update 3.2

References

• http://www.securityfocus.com/bid/106650
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0647
• http://www.securityfocus.com/bid/106650
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0647

Get alerted when CVE-2019-0647 or the next vulnerability affects your stack