PT-2024-7261 · 1с · Bitrix24+1

Oleg Labyntsev + 1 · Published 2024-04-23 · Updated 2024-11-05 · CVE-2024-34885

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions 1C-Bitrix Bitrix24 version 23.300.100

Description The issue is related to insufficiently protected credentials in SMTP server settings, allowing remote administrators to read SMTP accounts passwords via an HTTP GET request. This can be exploited by a remote attacker to misuse SMTP settings and gain access to authentication data from the SMTP server.

Recommendations For version 23.300.100, consider restricting access to the SMTP server settings to minimize the risk of exploitation. As a temporary workaround, avoid using the HTTP GET request to access SMTP account passwords until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

BDU:2024-08610

CVE-2024-34885

Affected Products

Bitrix24

Bitrix

References · 8

• 🔥 https://github.com/DrieVlad/BitrixVulns · Exploit
• https://osv.dev/vulnerability/CVE-2024-34885 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-34885 · Security Note
• https://bdu.fstec.ru/vul/2024-08610 · Security Note
• https://twitter.com/VulmonFeeds/status/1853564003416486150 · Twitter Post
• https://twitter.com/CVEnew/status/1853502857179488335 · Twitter Post
• https://t.me/cvedetector/9784 · Telegram Post
• http://bitrix24.com · Note