Service Fabric Privilege Escalation from Containerized Workloads on Linux

2022-06-2823:35:53

msrc-blog.microsoft.com

service fabric

privilege escalation

containerized workloads

linux

coordinated vulnerability disclosure

palo alto networks

microsoft

vulnerability

bad actor

compromised container

privileges escalation

resource host

sf node

entire cluster

bug

EPSS

0.005

Percentile

77.2%

JSON

Under Coordinated Vulnerability Disclosure (CVD), cloud-security vendor Palo Alto Networks informed Microsoft of an issue affecting Service Fabric (SF) Linux clusters (CVE-2022-30137). The vulnerability enables a bad actor, with access to a compromised container, to escalate privileges and gain control of the resource’s host SF node and the entire cluster. Though the bug exists on …

Service Fabric Privilege Escalation from Containerized Workloads on Linux Read More »