What is CVE-2020-17145?

CVE-2020-17145 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. Azure DevOps Server and Team Foundation Services Spoofing Vulnerability

Which CVE IDs does CVE-2020-17145 cover?

CVE-2020-17145 covers the following CVE IDs: CVE-2020-17145. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2020-17145?

CVE-2020-17145 has a CVSS v3 base score of 5.4, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2020-17145?

CVE-2020-17145 affects 7 products, including: Azure DevOps Server 2019 Update 1.1; Azure DevOps Server 2019.0.1; Azure DevOps Server 2020; Team Foundation Server 2015 Update 4.2; Team Foundation Server 2017 Update 3.1; and others — see the full list on the advisory page.

CVE-2020-17145HighCVSS 5.4

Azure DevOps Server and Team Foundation Services Spoofing Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

December 8, 2020

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2020-17145 →

🎯 Affected products7

Azure DevOps Server 2019 Update 1.1
Azure DevOps Server 2019.0.1
Azure DevOps Server 2020
Team Foundation Server 2015 Update 4.2
Team Foundation Server 2017 Update 3.1
Team Foundation Server 2018 Update 1.2
Team Foundation Server 2018 Update 3.2

✅ Remediation

KBRelease Notes (Security Update)

🔗 References (15)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17145
patchhttps://aka.ms/azdev2019.0.1patch
referencehttps://docs.microsoft.com/en-us/azure/devops/server/release-notes/azuredevops2019?view=azure-devops
patchhttps://aka.ms/tfs2017.3.1patch
referencehttps://docs.microsoft.com/en-us/visualstudio/releasenotes/tfs2017-update3
patchhttps://aka.ms/tfs2018.1.2patch
referencehttps://docs.microsoft.com/en-us/visualstudio/releasenotes/tfs2018-update1
patchhttps://aka.ms/tfs2018.3.2patch
referencehttps://docs.microsoft.com/en-us/visualstudio/releasenotes/tfs2018-update3
patchhttps://aka.ms/tfs2015.4.2patch
referencehttps://docs.microsoft.com/en-us/visualstudio/releasenotes/tfs2015-update4-vs
patchhttps://aka.ms/azdev2019.1patch
referencehttps://docs.microsoft.com/en-us/azure/devops/server/release-notes/azuredevops2019u1
patchhttps://aka.ms/azdev2020patch
referencehttps://docs.microsoft.com/en-us/azure/devops/server/release-notes/azuredevops2020?view=azure-devops