CVE-2020-28206

The CVE-2020-28206 entry describes a vulnerability in Bitrix24 Bitrix Framework (1c site management) version 20.0 where a flaw in the admin login form allows user enumeration of administrator-group accounts and enables brute-force attempts on passwords for users not in the administrator group. Th...

CVE-2020-28206: Improper Restriction of Excessive Authentication Attempts

An issue was discovered in Bitrix24 Bitrix Framework 1c site management 20.0. An "User enumeration and Improper Restriction of Excessive Authentication Attempts" vulnerability exists in the admin login form, allowing a remote user to enumerate users in the administrator group. This also allows...

PT-2020-16946

Name of the Vulnerable Software and Affected Versions Bitrix24 Bitrix Framework 1c site management version 20.0 Description An issue exists in the admin login form, allowing a remote user to enumerate users in the administrator group. This also allows brute-force attacks on the passwords of users...

Bitrix Framework Security Vulnerability

Bitrix24 is a suite of enterprise social platforms from Bitrix USA. The platform includes features such as online communication, calendar management and CRM Customer Relationship Management. A security vulnerability exists in the Bitrix24 Bitrix Framework, which stems from an "improper restrictio...