CVE-2019-0647: Microsoft Team Foundation Server

Medium severity, CVSS 6.5. EPSS: 4.6% chance of exploitation in the next 30 days.

An information disclosure vulnerability exists when Team Foundation Server does not properly handle variables marked as secret, aka "Team Foundation Server Information Disclosure Vulnerability." This affects Team.

Affected products

• Microsoft Team Foundation Server: version 2017 only; version 2018 only

Published 2019-01-17. Last modified 2026-06-17.