CVE-2022-30137

Published: Jun 15, 2022Modified: Jun 17, 2026

6.7

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.8 / Impact: 5.9

Source: secure@microsoft.com (Secondary)

Description

Executive Summary An Elevation of Privilege (EOP) vulnerability has been identified within Service Fabric clusters that run Docker containers. Exploitation of this EOP vulnerability requires an attacker to gain remote code execution within a container. All Service Fabric and Docker versions are impacted.

Affected (1)

Products: Microsoft: Service Fabric

Microsoft

1 product

Service Fabric

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Microsoft Service Fabric	All versions

References (2)

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30137

Source: secure@microsoft.com

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-30137

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.