Insufficiently protected credentials in SMTP server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to read SMTP accounts passwords via HTTP GET request.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
http://bitrix24.com | |
https://github.com/DrieVlad/BitrixVulns |
History
Tue, 05 Nov 2024 17:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Bitrix
Bitrix bitrix24 |
|
Weaknesses | CWE-522 | |
CPEs | cpe:2.3:a:bitrix:bitrix24:*:*:*:*:*:*:*:* | |
Vendors & Products |
Bitrix
Bitrix bitrix24 |
|
Metrics |
cvssV3_1
|
Mon, 04 Nov 2024 18:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | Insufficiently protected credentials in SMTP server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to read SMTP accounts passwords via HTTP GET request. | |
References |
|
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2024-11-04T00:00:00
Updated: 2024-11-05T16:45:59.641Z
Reserved: 2024-05-09T00:00:00
Link: CVE-2024-34885
Vulnrichment
Updated: 2024-11-05T16:45:49.771Z
NVD
Status : Awaiting Analysis
Published: 2024-11-04T19:15:06.560
Modified: 2024-11-05T17:35:15.887
Link: CVE-2024-34885
Redhat
No data.