pentester.land· Jun 28, 2022· by Unit 42 (@Unit42_Intel)

FabricScape: Escaping Service Fabric and Taking Over the Cluster

Target Program: Microsoft

🎯 Vulnerability: Web Security Vulnerability

💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.

#Container escape#Local Privilege Escalation#Cross-tenant vulnerability