Unrated severityNVD Advisory· Published Nov 4, 2024· Updated Nov 5, 2024
CVE-2024-34887
CVE-2024-34887
Description
Insufficiently protected credentials in AD/LDAP server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to send AD/LDAP administrators account passwords to an arbitrary server via HTTP POST request.
Affected products
2- 1C-Bitrix/Bitrix24description
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- bitrix24.commitre
News mentions
0No linked articles in our index yet.