What is CVE-2020-0902?

CVE-2020-0902 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. Service Fabric Elevation of Privilege

Which CVE IDs does CVE-2020-0902 cover?

CVE-2020-0902 covers the following CVE IDs: CVE-2020-0902. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by CVE-2020-0902?

CVE-2020-0902 affects 1 product, including: Service Fabric.

CVE-2020-0902High

Service Fabric Elevation of Privilege

Vendor

Microsoft Security Response Center (MSRC)

Published

March 10, 2020

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2020-0902 →

📋 Description

An elevation of privilege vulnerability exists in Service Fabric File Store Service under certain conditions. An unauthenticated remote user could gain rights to the Service Fabric File Store Service if the node is exposed externally via SMB or SCP standard ports and they are using the impacted configuration. The update addresses the vulnerability by making ineffective the resources created by the impacted configuration.

🎯 Affected products1

Service Fabric

✅ Remediation

KBRelease Notes (Security Update)

🔗 References (2)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-0902
patchhttps://docs.microsoft.com/en-us/azure/service-fabric/service-fabric-get-started