{
  "document": {
    "acknowledgments": [
      {
        "names": [
          "Lidor Ben Shitrit with Orca Security"
        ]
      }
    ],
    "aggregate_severity": {
      "namespace": "https://www.microsoft.com/en-us/msrc/security-update-severity-rating-system",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Public",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "general",
        "text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
        "title": "Disclaimer"
      },
      {
        "category": "general",
        "text": "Required. The vulnerability documented by this CVE requires customer action to resolve.",
        "title": "Customer Action"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "secure@microsoft.com",
      "name": "Microsoft Security Response Center",
      "namespace": "https://msrc.microsoft.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "CVE-2022-35829 Service Fabric Explorer Spoofing Vulnerability - HTML",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35829"
      },
      {
        "category": "self",
        "summary": "CVE-2022-35829 Service Fabric Explorer Spoofing Vulnerability - CSAF",
        "url": "https://msrc.microsoft.com/csaf/2022/msrc_cve-2022-35829.json"
      },
      {
        "category": "external",
        "summary": "Microsoft Exploitability Index",
        "url": "https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1"
      },
      {
        "category": "external",
        "summary": "Microsoft Support Lifecycle",
        "url": "https://support.microsoft.com/lifecycle"
      },
      {
        "category": "external",
        "summary": "Common Vulnerability Scoring System",
        "url": "https://www.first.org/cvss"
      }
    ],
    "title": "Service Fabric Explorer Spoofing Vulnerability",
    "tracking": {
      "current_release_date": "2022-10-11T07:00:00.000Z",
      "generator": {
        "date": "2025-01-02T21:26:57.294Z",
        "engine": {
          "name": "MSRC Generator",
          "version": "1.0"
        }
      },
      "id": "msrc_CVE-2022-35829",
      "initial_release_date": "2022-10-11T07:00:00.000Z",
      "revision_history": [
        {
          "date": "2022-10-11T07:00:00.000Z",
          "legacy_version": "1",
          "number": "1",
          "summary": "Information published."
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c8.1.316.9590",
            "product": {
              "name": "Azure Service Fabric Explorer \u003c8.1.316.9590",
              "product_id": "1"
            }
          },
          {
            "category": "product_version",
            "name": "8.1.316.9590",
            "product": {
              "name": "Azure Service Fabric Explorer 8.1.316.9590",
              "product_id": "12088"
            }
          }
        ],
        "category": "product_name",
        "name": "Azure Service Fabric Explorer"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-35829",
      "notes": [
        {
          "category": "general",
          "text": "Microsoft",
          "title": "Assigning CNA"
        },
        {
          "category": "faq",
          "text": "An attacker needs to have CreateComposeDeployment permission to exploit this vulnerability. Please refer to the Security/ClientAccess section of Customize Service Fabric cluster settings for more information on the permission.",
          "title": "According to the CVSS metric, privileges required is high (PR:H).  What does that mean for this vulnerability?"
        },
        {
          "category": "faq",
          "text": "The vulnerability is in the web client, but the malicious scripts executed in the victim\u2019s browser translate into actions executed in the (remote) cluster.",
          "title": "According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?"
        },
        {
          "category": "faq",
          "text": "A vulnerable version of Service Fabric Explorer (SFXv1) has the URL that ends in \u0026quot;old.html\u0026quot;. If you are on an unsupported version of Service Fabric Runtime (8.1.316 and below), you will be vulnerable. Please update to a supported version of Service Fabric Runtime. See Service Fabric supported versions for the list of all supported versions of the runtime. On supported versions of the Service Fabric Runtime, the Service Fabric Explorer version (SFXv2) which is loaded by default is not affected by this vulnerability. On supported SF runtime versions, you can verify you are using SFXv2 by checking that the URL of Service Fabric Explorer ends in \u0026quot;index.html\u0026quot;.\nPlease refer to Manage Service Fabric cluster upgrades for instructions on how to update your Service Fabric Cluster.\nSFXv2 is loaded by default on all supported versions of Service Fabric. You can navigate to SFXv2 by making sure the Service Fabric Explorer URL ends in \u0026quot;index.html\u0026quot;. An example of a vulnerable URL would be\nhttps://\u0026lt;your instance name\u0026gt;.cloudapp.azure.com:19080/Explorer/old.html#/.\nYou can navigate to any of the following URLs to switch to SFXv2:\nhttps://\u0026lt;your instance name\u0026gt;.cloudapp.azure.com:19080/Explorer/index.html#/, https://\u0026lt;your instance name\u0026gt;.cloudapp.azure.com:19080/Explorer/, https://\u0026lt;your instance name\u0026gt;.cloudapp.azure.com:19080/",
          "title": "How can I ensure I am not on a vulnerable version of Service Fabric Explorer?"
        },
        {
          "category": "faq",
          "text": "A victim user would have to click the stored XSS payload injected by the attacker to be compromised.",
          "title": "According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?"
        }
      ],
      "product_status": {
        "fixed": [
          "12088"
        ],
        "known_affected": [
          "1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2022-35829 Service Fabric Explorer Spoofing Vulnerability - HTML",
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35829"
        },
        {
          "category": "self",
          "summary": "CVE-2022-35829 Service Fabric Explorer Spoofing Vulnerability - CSAF",
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35829"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-10-11T07:00:00.000Z",
          "details": "8.1.316.9590:Security Update:https://learn.microsoft.com/en-us/azure/service-fabric/service-fabric-versions",
          "product_ids": [
            "1"
          ],
          "url": "https://learn.microsoft.com/en-us/azure/service-fabric/service-fabric-versions"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.2,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "environmentalsScore": 0.0,
            "exploitCodeMaturity": "UNPROVEN",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "remediationLevel": "OFFICIAL_FIX",
            "reportConfidence": "CONFIRMED",
            "scope": "CHANGED",
            "temporalScore": 5.4,
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Spoofing"
        },
        {
          "category": "exploit_status",
          "details": "Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely"
        }
      ],
      "title": "Service Fabric Explorer Spoofing Vulnerability"
    }
  ]
}