What is CVE-2021-1725?

CVE-2021-1725 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. Bot Framework SDK Information Disclosure Vulnerability

Which CVE IDs does CVE-2021-1725 cover?

CVE-2021-1725 covers the following CVE IDs: CVE-2021-1725. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2021-1725?

CVE-2021-1725 has a CVSS v3 base score of 5.5, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2021-1725?

CVE-2021-1725 affects 3 products, including: Bot Framework SDK for .NET Framework; Bot Framework SDK for JavaScript; Bot Framework SDK for Python.

CVE-2021-1725HighCVSS 5.5

Bot Framework SDK Information Disclosure Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

January 12, 2021

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2021-1725 →

📋 Description

How do I know if I need to install the update? Customers using Bot Framework SDK with versions shown in the Security Update Applies To column in the following table affected by this vulnerability. SDK Unaffected Versions Prior To Security Update Applies To Unaffected Versions Greater Than .NET Framework 4.6.0 4.6.0 - 4.10.2 4.10.2 JavaScript 4.7.0 4.7.0 - 4.10.1 4.10.1 Python 4.7.0 4.7.0 - 4.10.0 4.10.0

What type of information could be disclosed by this vulnerability? The type of information that could be disclosed if an attacker successfully exploited this vulnerability is sensitive information.

Bot Framework SDK Information Disclosure Vulnerability

🔗 CVE IDs covered (1)

📋 Description

🎯 Affected products3

✅ Remediation

🔗 References (4)