VYPR
← All advisories
Medium severity4.9NVD Advisory· Published Nov 4, 2024· Updated Jul 5, 2026

CVE-2024-34887

CVE-2024-34887

Description

Insufficiently protected credentials in AD/LDAP server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to send AD/LDAP administrators account passwords to an arbitrary server via HTTP POST request.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Bitrix/Bitrix24cpe-rescue2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: 23.300.100

Patches

Vulnerability mechanics

News mentions

0

No linked articles in our index yet.