A
n issue was discovered in Bitrix24 Bitrix Framework (1c site management) 20.0. An "User enumeration and Improper Restriction of Excessive Authentication Attempts" vulnerability exists in the admin login form, allowing a remote user to enumerate users in the administrator group. This also allows brute-force attacks on the passwords of users not in the administrator group.
References
| Link | Resource |
|---|---|
| https://justrealstag.medium.com/user-enumeration-improper-restriction-of-excessive-authentication-attempts-in-bitrix-98933a97e0e6 | Exploit Third Party Advisory |
| https://justrealstag.medium.com/user-enumeration-improper-restriction-of-excessive-authentication-attempts-in-bitrix-98933a97e0e6 | Exploit Third Party Advisory |
Configurations
History
21 Nov 2024, 05:22
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://justrealstag.medium.com/user-enumeration-improper-restriction-of-excessive-authentication-attempts-in-bitrix-98933a97e0e6 - Exploit, Third Party Advisory |
Information
Published : 2020-12-02 19:15
Updated : 2024-11-21 05:22
NVD link : CVE-2020-28206
Mitre link : CVE-2020-28206
CVE.ORG link : CVE-2020-28206
JSON object : View
Products Affected
CWE
CWE-307
Improper Restriction of Excessive Authentication Attempts