title: Bot Framework SDK Information Disclosure Vulnerability
description: Bot Framework SDK Information Disclosure Vulnerability
problem types: Information Disclosure
affected:
{
vendor: Microsoft
product: Bot Framework SDK for .NET Framework
cpes: cpe:2.3:a:microsoft:bot_framework_software_development_kit:-:*:*:*:*:.net_framework:*:*
platforms: Unknown
versions:
version: 4.0.0, lessThan: publication, versionType: custom, status: affected
}
{
vendor: Microsoft
product: Bot Framework SDK for JavaScript
cpes: cpe:2.3:a:microsoft:bot_framework_software_development_kit:-:*:*:*:*:javascript:*:*
platforms: Unknown
versions:
version: 4.0.0, lessThan: publication, versionType: custom, status: affected
}
{
vendor: Microsoft
product: Bot Framework SDK for Python
cpes: cpe:2.3:a:microsoft:bot_framework_software_development_kit:-:*:*:*:*:python:*:*
platforms: Unknown
versions:
version: 4.0.0, lessThan: publication, versionType: custom, status: affected
}
metrics:
format: CVSS
scenarios: GENERAL
cvssV3_1: [
version: 3.1
baseSeverity: MEDIUM
baseScore: 5.5
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
]