CVE-2021-28458: Azure ms-rest-nodeauth Library Elevation of Privilege Vulnerability

Overview

Severity
High (CVSS 7.8)
CVSS Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
Category
Elevation of Privilege
Exploit Status
Not Exploited
Exploitation Likelihood
Less Likely
Publicly Disclosed
Yes
Patch Tuesday
2021-Apr
Released
2021-04-13
EPSS Score
9.08% (percentile: 92.7%)

Affected Products (1)

Azure

  • @azure/ms-rest-nodeauth

Security Updates (1)

Revision History

  • 2021-04-13: Information published.