CVE-2024-34891

Summary

CVE-2024-34891 is a newly disclosed vulnerability affecting the DAV server settings in 1C-Bitrix Bitrix24 version 23.300.100. This issue stems from insufficient protection of credentials, enabling remote administrators to retrieve Exchange account passwords through an HTTP GET request. This vulnerability poses a significant risk, as it grants unauthorized access to sensitive information, potentially leading to data breaches or further system compromises. Organizations using the affected version of Bitrix24 are urged to apply the necessary patches as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.