CVE-2019-0647

6.5 mediumEPSS 4.6%

An information disclosure vulnerability exists when Team Foundation Server does not properly handle variables marked as secret, aka "Team Foundation Server Information Disclosure Vulnerability." This affects Team.

Severity

CVSS 3.0

6.5 medium

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 4.6% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2019-01-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:team_foundation_server

References

http://www.securityfocus.com/bid/106650
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0647
http://www.securityfocus.com/bid/106650
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0647

Check your stack JSON