← All advisories

High severity7.8NVD Advisory· Published Apr 13, 2021· Updated Jun 17, 2026

CVE-2021-28458

CVE-2021-28458

Description

Azure ms-rest-nodeauth Library Elevation of Privilege Vulnerability

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
@azure/ms-rest-nodeauthnpm	< 3.0.8	3.0.8

Affected products

3

Microsoft/Ms Rest Nodeauth
cpe:2.3:a:microsoft:ms-rest-nodeauth:*:*:*:*:*:node.js:*:*
Range: <3.0.8
Microsoft/Azure ms-rest-nodeauth Librarycpe-rescue
cpe:2.3:a:microsoft:ms-rest-nodeauth:-:*:*:*:*:node.js:*:*
Range: 0.8.0
ghsa-coords
pkg:npm/%40azure/ms-rest-nodeauth
Range: < 3.0.8

Patches

Vulnerability mechanics

References

4

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28458nvdPatchVendor AdvisoryWEB
github.com/advisories/GHSA-qpfw-4m9x-rxx8ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2021-28458ghsaADVISORY
github.com/Azure/ms-rest-nodeauth/commit/1b8dcfb6d7e1c8a0a00044286021a841961cf636ghsaWEB

News mentions

0

No linked articles in our index yet.