CVEvulnerability
CVE-2022-30137
6.7 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2022-06-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Description
Executive Summary
An Elevation of Privilege (EOP) vulnerability has been identified within Service Fabric clusters that run Docker containers. Exploitation of this EOP vulnerability requires an attacker to gain remote code execution within a container. All Service Fabric and Docker versions are impacted.
Affected configurations
• microsoft service fabric
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30137 msrc.microsoft.com
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-30137 Patch, Vendor Advisory