CVE-2024-34882

Insufficiently protected credentials in SMTP server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to send SMTP account passwords to an arbitrary server via HTTP POST request...

CVE-2024-5143

A user with device administrative privileges can change existing SMTP server settings on the device, without having to re-enter SMTP server credentials. By redirecting send-to-email traffic to the new server, the original SMTP server credentials may potentially be exposed...

CVE-2024-34885

The 1C-Bitrix Bitrix24 platform, specifically version 23.300.100 , contains a vulnerability due to insufficiently protected credentials within the SMTP server settings. A remote administrator can perform an HTTP GET request to read SMTP account passwords, which could allow an attacker to gain una...

CVE-2024-5143

The HP Color LaserJet MFP M478-M479 series printers are vulnerable to an information disclosure flaw due to deficiencies in the authentication process of their microprogrammed software. A user with device administrative privileges can modify existing SMTP server settings without re-entering crede...

CVE-2024-5143

A user with device administrative privileges can change existing SMTP server settings on the device, without having to re-enter SMTP server credentials. By redirecting send-to-email traffic to the new server, the original SMTP server credentials may potentially be exposed...