Show filters
29 Total Results
Displaying 1-10 of 29
Sort by:
Attacker Value
Unknown
CVE-2021-27067
Disclosure Date: April 13, 2021 (last updated November 28, 2024)
Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability
0
Attacker Value
Unknown
CVE-2021-21638
Disclosure Date: March 30, 2021 (last updated February 22, 2025)
A cross-site request forgery (CSRF) vulnerability in Jenkins Team Foundation Server Plugin 5.157.1 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
0
Attacker Value
Unknown
CVE-2021-21637
Disclosure Date: March 30, 2021 (last updated February 22, 2025)
A missing permission check in Jenkins Team Foundation Server Plugin 5.157.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
0
Attacker Value
Unknown
CVE-2021-21636
Disclosure Date: March 30, 2021 (last updated February 22, 2025)
A missing permission check in Jenkins Team Foundation Server Plugin 5.157.1 and earlier allows attackers with Overall/Read permission to enumerate credentials ID of credentials stored in Jenkins.
0
Attacker Value
Unknown
CVE-2020-17145
Disclosure Date: December 10, 2020 (last updated November 28, 2024)
Azure DevOps Server and Team Foundation Services Spoofing Vulnerability
0
Attacker Value
Unknown
CVE-2020-2249
Disclosure Date: September 01, 2020 (last updated February 22, 2025)
Jenkins Team Foundation Server Plugin 5.157.1 and earlier stores a webhook secret unencrypted in its global configuration file on the Jenkins controller where it can be viewed by attackers with access to the Jenkins controller file system.
0
Attacker Value
Unknown
CVE-2020-0758
Disclosure Date: March 12, 2020 (last updated November 27, 2024)
An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle pipeline job tokens, aka 'Azure DevOps Server and Team Foundation Services Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0815.
0
Attacker Value
Unknown
CVE-2020-0700
Disclosure Date: March 12, 2020 (last updated February 21, 2025)
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Cross-site Scripting Vulnerability'.
0
Attacker Value
Unknown
CVE-2019-1305
Disclosure Date: September 11, 2019 (last updated November 27, 2024)
A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'.
0
Attacker Value
Unknown
CVE-2019-1306
Disclosure Date: September 11, 2019 (last updated November 27, 2024)
A remote code execution vulnerability exists when Azure DevOps Server (ADO) and Team Foundation Server (TFS) fail to validate input properly, aka 'Azure DevOps and Team Foundation Server Remote Code Execution Vulnerability'.
0
