CVE-2024-34882

Insufficiently protected credentials in SMTP server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to send SMTP account passwords to an arbitrary server via HTTP POST request...

CVE-2024-5143

A user with device administrative privileges can change existing SMTP server settings on the device, without having to re-enter SMTP server credentials. By redirecting send-to-email traffic to the new server, the original SMTP server credentials may potentially be exposed...

CVE-2024-34885

The 1C-Bitrix Bitrix24 content management system, specifically version 23.300.100 , is affected by a vulnerability involving insufficiently protected credentials within the SMTP server settings. A remote attacker can exploit this by sending an HTTP GET request to read SMTP account passwords and g...

CVE-2024-34882: Insufficiently Protected Credentials

Insufficiently protected credentials in SMTP server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to send SMTP account passwords to an arbitrary server via HTTP POST request...

CVE-2024-34885: Insufficiently Protected Credentials

Insufficiently protected credentials in SMTP server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to read SMTP accounts passwords via HTTP GET request...

CVE-2024-5143

A user with device administrative privileges can change existing SMTP server settings on the device, without having to re-enter SMTP server credentials. By redirecting send-to-email traffic to the new server, the original SMTP server credentials may potentially be exposed...

CVE-2024-5143

The HP Color LaserJet MFP M478-M479 series printers are vulnerable to an information disclosure flaw due to a weakness in the authentication procedure of their microprogrammed software. A user with device administrative privileges can modify existing SMTP server settings without being required to...

CVE-2024-5143: Missing Authentication for Critical Function

A user with device administrative privileges can change existing SMTP server settings on the device, without having to re-enter SMTP server credentials. By redirecting send-to-email traffic to the new server, the original SMTP server credentials may potentially be exposed...