Team Foundation Server (TFS) is affected by the ASP.NET Vulnerability

September 23, 2010 by Wes MacDonald 0 Comments

In case you haven’t heard a vulnerability has been posted about ASP.NET. You can read more about it on Scott’s blog or on the Microsoft Security Advisory.

This vulnerability DOES affect numerous components of TFS and related services, including:

TFS Web Services
Team Web Access
TFS Proxy
Sharepoint
Reporting Services

The document at Brian Harry’s post includes the necessary changes for TFS 2010, TFS 2008 and TFS 2005. The SQL Server product group has not yet published a set of changes to work around the vulnerability in Reporting Services.

Visual Studio 2010

About Wes MacDonald

Wes MacDonald is a DevOps Consultant for LIKE 10 INC., a DevOps consulting firm providing premium support, guidance and services for Azure, Microsoft 365 and Azure DevOps.

View all posts by Wes MacDonald →

ASP.NET Security Vulnerability Could Allow Information Disclosure

Hello world!