CVE-2022-30137

Azure Service Fabric Container Elevation of Privilege Vulnerability

Medium · published June 15, 2022

CVSS v3.1
6.7
EPSS
1%
Percentile
66.2
In the wild
Unconfirmed
What it is

Executive Summary

An Elevation of Privilege (EOP) vulnerability has been identified within Service Fabric clusters that run Docker containers. Exploitation of this EOP vulnerability requires an attacker to gain remote code execution within a container. All Service Fabric and Docker versions are impacted.

The record
Technical detail
CVSS v3.1
6.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.01133 · 66.2th percentile
Published
2022-06-15T21:51Z
EPSS history
Timeline
  • 15 JUN 21:51Z
    Azure Service Fabric Container Elevation of Privilege Vulnerability
    cvelistv5