Paolo Giai Polict

**Name of the Vulnerable Software and Affected Versions** Azure DevOps Server and Microsoft Team Foundation Server (affected versions not specified) **Description** The issue is related to an information disclosure vulnerability. It occurs when Azure DevOps Server and Microsoft Team Foundation Server do not properly sanitize a specially crafted authentication request to an affected server. This vulnerability may allow a remote attacker to execute arbitrary code and impact the confidentiality, integrity, and availability of protected information. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.