CVE-2024-34891

Insufficiently protected credentials in DAV server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to read Exchange account passwords via HTTP GET request...

CVE-2024-34891

The 1C-Bitrix Bitrix24 platform, specifically version 23.300.100 , is vulnerable to the disclosure of sensitive information due to insufficiently protected credentials in DAV server settings . A remote administrator can exploit this flaw to read Exchange account passwords by sending an HTTP GET r...