CVE-2022-30137: Azure Service Fabric Container Elevation of Privilege Vulnerability
Azure Service Fabric Container Elevation of Privilege Vulnerability
Other sources
Executive Summary An Elevation of Privilege (EOP) vulnerability has been identified within Service Fabric clusters that run Docker containers. Exploitation of this EOP vulnerability requires an attacker to gain remote code execution within a container. All Service Fabric and Docker versions are impacted.
— Microsoft
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-30137?
CVE-2022-30137 has been classified as a critical vulnerability due to its potential for Elevation of Privilege.
How do I fix CVE-2022-30137?
To fix CVE-2022-30137, ensure that you apply the latest patches and updates provided by Microsoft for Service Fabric.
Who is affected by CVE-2022-30137?
CVE-2022-30137 affects Microsoft Azure Service Fabric clusters that run Docker containers.
What exploitation method is used in CVE-2022-30137?
Exploitation of CVE-2022-30137 requires remote code execution within a Docker container.
What is the impact of CVE-2022-30137 on Service Fabric?
The impact of CVE-2022-30137 allows attackers to elevate their privileges within Service Fabric clusters, potentially compromising the application integrity.