CVE-2020-28206: Improper Restriction of Excessive Authentication Attempts

An issue was discovered in Bitrix24 Bitrix Framework 1c site management 20.0. An "User enumeration and Improper Restriction of Excessive Authentication Attempts" vulnerability exists in the admin login form, allowing a remote user to enumerate users in the administrator group. This also allows...

PT-2020-16946

Name of the Vulnerable Software and Affected Versions Bitrix24 Bitrix Framework 1c site management version 20.0 Description An issue exists in the admin login form, allowing a remote user to enumerate users in the administrator group. This also allows brute-force attacks on the passwords of users...