CVE-2018-8529

Critical · 9.8

CVSS

9.8

EPSS

13.5%

Published

Nov 15, 2018

CISA due date

—

The record

A remote code execution vulnerability exists when Team Foundation Server (TFS) does not enable basic authorization on the communication between the TFS and Search services, aka "Team Foundation Server Remote Code Execution Vulnerability." This affects Team.

Affected packages

Ecosystem	Package	Introduced	Fixed