CVE-2021-28458

Description

Azure ms-rest-nodeauth Library Elevation of Privilege Vulnerability

How to fix CVE-2021-28458

To remediate CVE-2021-28458, upgrade the affected package to a fixed version below.

• npm/@azure/ms-rest-nodeauth—upgrade to 3.0.8 or later

Is CVE-2021-28458 being exploited?

Moderate — EPSS is 9.1%. Track this CVE but it's not at the top of the prioritisation list.

Affected packages (1)

• from 0, < 3.0.8

CVSS scores

References (4)

• ADVISORYnvd.nist.gov/vuln/detail/CVE-2021-28458
• PATCHgithub.com/Azure/ms-rest-nodeauth
• WEBgithub.com/Azure/ms-rest-nodeauth/commit/1b8dcfb6d7e1c8a0a00044286021a841961cf636
• WEBportal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28458