Description
Insufficiently protected credentials in AD/LDAP server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to send AD/LDAP administrators account passwords to an arbitrary server via HTTP POST request.
Medium · 6.8
CVE-2024-34887
EUVD-2024-35102GHSA-27r6-xq24-p9x8
Insufficiently protected credentials in AD/LDAP server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to send AD/LD…
Published Nov 4, 2024 · Updated Jul 5, 2026 · Assigned by mitre