CVE-2021-27067

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected software

VendorProductVersions
MicrosoftAzure DevOps Server 2019.0.1>= 2019.0.0, < publication
MicrosoftTeam Foundation Server 2017 Update 3.1>= 3.0, < publication
MicrosoftTeam Foundation Server 2018 Update 1.2>= 1.0, < publication
MicrosoftTeam Foundation Server 2018 Update 3.2>= 3.0, < publication
MicrosoftTeam Foundation Server 2015 Update 4.2>= 4.0, < publication
MicrosoftAzure DevOps Server 2019 Update 1< publication
MicrosoftAzure DevOps Server 2019 Update 1.1>= 1.0, < publication
MicrosoftAzure DevOps Server 2020>= 2020, < publication

References

Timeline

Published
Apr 13, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-270688.8Visual Studio Remote Code Execution VulnerabilityCVE-2021-270707.3Windows 10 Update Assistant Elevation of Privilege VulnerabilityCVE-2021-270727.0Win32k Elevation of Privilege VulnerabilityCVE-2021-270746.2Azure Sphere Unsigned Code Execution VulnerabilityCVE-2021-270756.8Azure Virtual Machine Information Disclosure VulnerabilityCVE-2021-270768.8Microsoft SharePoint Server Remote Code Execution VulnerabilityCVE-2021-270777.8Windows Win32k Elevation of Privilege VulnerabilityCVE-2021-270789.1Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2021-270795.7Windows Media Photo Codec Information Disclosure VulnerabilityCVE-2021-270809.3Azure Sphere Unsigned Code Execution VulnerabilityCVE-2021-270817.8Visual Studio Code ESLint Extension Remote Code Execution VulnerabilityCVE-2021-270827.8Quantum Development Kit for Visual Studio Code Remote Code Execution Vulnerability
CVE-2021-27067: Medium severity, CVSS 6.5 | Vulnix