CVE-2024-34882: Medium severity Bitrix24 Bitrix24 vulnerability
Insufficiently protected credentials in SMTP server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to send SMTP account passwords to an arbitrary server via HTTP POST request.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-34882?
CVE-2024-34882 has a critical severity rating due to the potential for remote exploitation allowing unauthorized access to sensitive credentials.
How do I fix CVE-2024-34882?
To fix CVE-2024-34882, ensure to update your 1C-Bitrix Bitrix24 software to the latest version that addresses this vulnerability.
Who is affected by CVE-2024-34882?
The vulnerability CVE-2024-34882 affects 1C-Bitrix Bitrix24 version 23.300.100 specifically.
What kind of data is exposed in CVE-2024-34882?
CVE-2024-34882 exposes SMTP account passwords, which can be sent to an arbitrary server via an HTTP POST request.
Can remote attackers exploit CVE-2024-34882?
Yes, remote attackers can exploit CVE-2024-34882 due to insufficient protection of credentials in SMTP server settings.