{"id":"CVE-2022-30187","state":"PUBLISHED","title":"Azure Storage Library Information Disclosure Vulnerability","description":"Azure Storage Library Information Disclosure Vulnerability","publishedAt":"2022-07-12T22:37:25.000Z","updatedAt":"2025-07-08T15:35:58.676Z","severity":{"score":4.7,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C","source":"microsoft"},"assigner":"microsoft","products":["Microsoft Azure Storage Blobs client library for .NET","Microsoft Azure Storage Queues client library for .NET","Microsoft Azure Storage Blobs client library for Java","Microsoft Azure Storage Queues client library for Python","Microsoft Azure Storage Blobs client library for Python"],"affected":[{"vendor":"Microsoft","product":"Azure Storage Blobs client library for .NET","versions":[{"version":"12.0.0","status":"affected","lessThan":"12.13.0","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure Storage Queues client library for .NET","versions":[{"version":"12.0.0","status":"affected","lessThan":"12.13.0","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure Storage Blobs client library for Java","versions":[{"version":"12.0.0","status":"affected","lessThan":"12.18.0","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure Storage Queues client library for Python","versions":[{"version":"12.0.0","status":"affected","lessThan":"12.4.0","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure Storage Blobs client library for Python","versions":[{"version":"12.0.0","status":"affected","lessThan":"12.13.0","versionType":"custom"}],"platforms":["Unknown"]}],"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30187"],"weaknesses":[],"ingestedAt":"2026-10-29T19:50:04.052Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/30xxx/CVE-2022-30187.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2022-30187","state":"PUBLISHED","datePublished":"2022-07-12T22:37:25.000Z","dateUpdated":"2025-07-08T15:35:58.676Z","assignerShortName":"microsoft","assignerOrgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","dateReserved":"2022-05-03T00:00:00.000Z"},"containers":{"cna":{"title":"Azure Storage Library Information Disclosure Vulnerability","descriptions":[{"lang":"en-US","value":"Azure Storage Library Information Disclosure Vulnerability"}],"affected":[{"vendor":"Microsoft","product":"Azure Storage Blobs client library for .NET","versions":[{"version":"12.0.0","status":"affected","lessThan":"12.13.0","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure Storage Queues client library for .NET","versions":[{"version":"12.0.0","status":"affected","lessThan":"12.13.0","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure Storage Blobs client library for Java","versions":[{"version":"12.0.0","status":"affected","lessThan":"12.18.0","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure Storage Queues client library for Python","versions":[{"version":"12.0.0","status":"affected","lessThan":"12.4.0","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure Storage Blobs client library for Python","versions":[{"version":"12.0.0","status":"affected","lessThan":"12.13.0","versionType":"custom"}],"platforms":["Unknown"]}],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30187","name":"Azure Storage Library Information Disclosure Vulnerability","tags":["vendor-advisory"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","baseSeverity":"MEDIUM","baseScore":4.7,"vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"}}],"problemTypes":[{"descriptions":[{"description":"Information Disclosure","lang":"en-US","type":"Impact"}]}],"providerMetadata":{"shortName":"microsoft","orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","dateUpdated":"2025-07-08T15:35:58.676Z"},"datePublic":"2022-07-12T07:00:00.000Z","cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_storage_blobs:*:*:*:*:*:.net:*:*","versionStartIncluding":"12.0.0","versionEndExcluding":"12.13.0"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_storage_queue:*:*:*:*:*:.net:*:*","versionStartIncluding":"12.0.0","versionEndExcluding":"12.13.0"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_storage_blobs:*:*:*:*:*:java:*:*","versionStartIncluding":"12.0.0","versionEndExcluding":"12.18.0"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_storage_blobs:*:*:*:*:*:python:*:*","versionStartIncluding":"12.0.0","versionEndExcluding":"12.4.0"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_storage_blobs:*:*:*:*:*:python:*:*","versionStartIncluding":"12.0.0","versionEndExcluding":"12.13.0"}]}]}]},"adp":[{"title":"CVE Program Container","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30187","name":"Azure Storage Library Information Disclosure Vulnerability","tags":["vendor-advisory","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T06:40:47.799Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-09-11T16:01:30.313428Z","id":"CVE-2022-30187","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-09-11T16:01:43.278Z"}}]}}}