Impact

Instance users with the list chat bots permission can read chat bot connections strings without the associated permission.

Patches

#1487

Workarounds for Affected Versions

Remove the list chat bots permission from users that should not have the ability to view connection strings. Invalidate any credentials previously stored for safety.