Lucene search
+L

5 matches found

Github Security Blog
Github Security Blog
•added 2021/03/08 3:50 p.m.•55 views

botframework-connector vulnerable to Improper Authentication

Impact A maliciously crafted claim may be incorrectly authenticated by the bot. Impacts bots that are not configured to be used as a Skill. This vulnerability requires an attacker to have internal knowledge of the bot. Patches The problem has been patched in all affected versions. Please see the...

5.5CVSS6.8AI score0.01074EPSS
SaveExploits0References6Affected Software1
Github Security Blog
Github Security Blog
•added 2021/03/08 3:50 p.m.•44 views

Improper Authentication

Impact A maliciously crafted claim may be incorrectly authenticated by the bot. Impacts bots that are not configured to be used as a Skill. This vulnerability requires an an attacker to have internal knowledge of the bot. Patches The problem has been patched in all affected versions. Please see t...

3.3AI score
SaveExploits0References4Affected Software1
OSV
OSV
•added 2021/03/08 3:50 p.m.•18 views

GHSA-QXX8-292G-2W66 Improper Authentication

Impact A maliciously crafted claim may be incorrectly authenticated by the bot. Impacts bots that are not configured to be used as a Skill. This vulnerability requires an an attacker to have internal knowledge of the bot. Patches The problem has been patched in all affected versions. Please see t...

6.8AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2021/03/08 3:49 p.m.•63 views

botframework-connector vulnerable to Improper Authentication

Impact A maliciously crafted claim may be incorrectly authenticated by the bot. Impacts bots that are not configured to be used as a Skill. This vulnerability requires an attacker to have internal knowledge of the bot. Patches The problem has been patched in all affected versions. Please see the...

5.5CVSS5.5AI score0.01074EPSS
SaveExploits0References6Affected Software1
Positive Technologies
Positive Technologies
•added 2021/03/08 12:00 a.m.•3 views

PT-2021-24455

Name of the Vulnerable Software and Affected Versions: Microsoft Bot Builder SDK affected versions not specified Description: A maliciously crafted claim may be incorrectly authenticated by the bot, requiring an attacker to have internal knowledge of the bot. This issue affects bots not configure...

5.8AI score
SaveExploits0References4
Rows per page
Query Builder