| Package | Affected versions | Patched versions |
|---|---|---|
| bitrix24 | ≤ 22.200.200 |
Insufficiently Protected Credentials in the AD/LDAP server settings in 1C-Bitrix Bitrix24 through 22.200.200 allow remote administrators to discover an AD/LDAP administrative password by reading the source code of /bitrix/admin/ldap_server_edit.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free