GitHub Advisoryadvisory · npm

GHSA-qpfw-4m9x-rxx8 Improper Privilege Management in Azure ms-rest-nodeauth

HIGH Published 2022-05-24 Modified 2024-01-02 Official page ↗

Aliases: CVE-2021-28458
Ecosystem: npm
Packages: @azure/ms-rest-nodeauth
Severity: High
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses: CWE-269
Reviewed: 2022-06-22

Affected packages

• npm @azure/ms-rest-nodeauth: < 3.0.8 → fixed in 3.0.8

Description

Azure ms-rest-nodeauth Library Elevation of Privilege Vulnerability

Related

Alias · CVE (1)

CVE-2021-28458 Azure ms-rest-nodeauth Library Elevation of Privilege Vulnerability vulnerability

Weakness · CWE (1)

CWE-269 Improper Privilege Management weakness

References