Lucene search
K

4 matches found

Github Security Blog
Github Security Blog
added 2021/03/08 3:50 p.m.41 views

botframework-connector vulnerable to Improper Authentication

Impact A maliciously crafted claim may be incorrectly authenticated by the bot. Impacts bots that are not configured to be used as a Skill. This vulnerability requires an attacker to have internal knowledge of the bot. Patches The problem has been patched in all affected versions. Please see the...

5.5CVSS6.8AI score0.0052EPSS
Exploits0References6Affected Software1
OSV
OSV
added 2021/03/08 3:50 p.m.10 views

GHSA-QXX8-292G-2W66 Improper Authentication

Impact A maliciously crafted claim may be incorrectly authenticated by the bot. Impacts bots that are not configured to be used as a Skill. This vulnerability requires an an attacker to have internal knowledge of the bot. Patches The problem has been patched in all affected versions. Please see t...

6.8AI score
Exploits0References3
Github Security Blog
Github Security Blog
added 2021/03/08 3:50 p.m.34 views

Improper Authentication

Impact A maliciously crafted claim may be incorrectly authenticated by the bot. Impacts bots that are not configured to be used as a Skill. This vulnerability requires an an attacker to have internal knowledge of the bot. Patches The problem has been patched in all affected versions. Please see t...

3.3AI score
Exploits0References4Affected Software1
Github Security Blog
Github Security Blog
added 2021/03/08 3:49 p.m.49 views

botframework-connector vulnerable to Improper Authentication

Impact A maliciously crafted claim may be incorrectly authenticated by the bot. Impacts bots that are not configured to be used as a Skill. This vulnerability requires an attacker to have internal knowledge of the bot. Patches The problem has been patched in all affected versions. Please see the...

5.5CVSS5.5AI score0.0052EPSS
Exploits0References6Affected Software1
Rows per page
Query Builder