Team Foundation Server (TFS) is affected by the ASP.NET Vulnerability


In case you haven’t heard a vulnerability has been posted about ASP.NET.  You can read more about it on Scott’s blog or on the Microsoft Security Advisory
 
 
This vulnerability DOES affect numerous components of TFS and related services, including:
 
  • TFS Web Services
  • Team Web Access
  • TFS Proxy
  • Sharepoint
  • Reporting Services

The document at Brian Harry’s post includes the necessary changes for TFS 2010, TFS 2008 and TFS 2005. The SQL Server product group has not yet published a set of changes to work around the vulnerability in Reporting Services.

 

 

 

About wesmacdonald

Wes MacDonald is a Visual Studio ALM MVP, PSD, MCT and a Principal Consultant for LIKE 10 INC., a SharePoint Server, Visual Studio and Team Foundation Server Consulting Firm providing premium support and guidance services.

No comments yet... Be the first to leave a reply!

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: