Medium severity6.5NVD Advisory· Published Jan 17, 2019· Updated Jun 17, 2026

CVE-2019-0647

Description

An information disclosure vulnerability exists when Team Foundation Server does not properly handle variables marked as secret, aka "Team Foundation Server Information Disclosure Vulnerability." This affects Team.

Affected products

Microsoft/Team Foundation Serverllm-fuzzy
Team Foundation Server/Team Foundation Serverllm-fuzzy
Microsoft/Teamscpe-rescue
Range: Foundation Server 2017 Update 3.1

Patches

Vulnerability mechanics

References

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0647nvdPatchVendor Advisory
www.securityfocus.com/bid/106650nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.004
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000