← Back to CVE List

CVE-2024-34891

Published: 2024-11-04T19:15Z
Last Modified: 2024-11-05T17:35Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
Insufficiently protected credentials in DAV server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to read Exchange account passwords via HTTP GET request. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt