CVE-2021-27067HighCVSS 6.5
Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability
🔗 CVE IDs covered (1)
📋 Description
What type of information could be disclosed by this vulnerability? The type of information that could be disclosed if an attacker successfully exploited this vulnerability is Azure DevOps Server pipeline configuration variables and secrets.
🎯 Affected products8
- Azure DevOps Server 2019 Update 1
- Azure DevOps Server 2019 Update 1.1
- Azure DevOps Server 2019.0.1
- Azure DevOps Server 2020
- Team Foundation Server 2015 Update 4.2
- Team Foundation Server 2017 Update 3.1
- Team Foundation Server 2018 Update 1.2
- Team Foundation Server 2018 Update 3.2
✅ Remediation
KBRelease Notes (Security Update)
🔗 References (9)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-27067
- patchhttps://aka.ms/azdev2019.1.1patch10
- patchhttps://aka.ms/tfs2017.3.1patch
- patchhttps://aka.ms/tfs2018.1.2patch
- patchhttps://aka.ms/tfs2018.3.2patch
- patchhttps://aka.ms/tfs2015.4.2patch
- patchhttp://aka.ms/azdev2019.1patch
- patchhttps://aka.ms/azdev2019.1.1patch8
- patchhttps://aka.ms/azdev2020.0.1patch2