VulnerabilityModified

CVE-2022-30137

Executive Summary An Elevation of Privilege (EOP) vulnerability has been identified within Service Fabric clusters that run Docker containers.

MEDIUM 6.7EPSS 1.13%

Does this matter?

Lower severity and a low EPSS score (1.13%). Track it; it rarely justifies an emergency change on its own.

Description

Executive Summary An Elevation of Privilege (EOP) vulnerability has been identified within Service Fabric clusters that run Docker containers. Exploitation of this EOP vulnerability requires an attacker to gain remote code execution within a container. All Service Fabric and Docker versions are impacted.

CVSS 3.1: 6.7 MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS: 1.13% probability · 65th percentile
CISA KEV: Not listed
Affected: microsoft/service fabric
Source: secure@microsoft.com

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30137
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-30137Patch, Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.