CVE-2020-28206 | BDVDB-2026-145342 Detail

Description#

An issue was discovered in Bitrix24 Bitrix Framework (1c site management) 20.0. An "User enumeration and Improper Restriction of Excessive Authentication Attempts" vulnerability exists in the admin login form, allowing a remote user to enumerate users in the administrator group. This also allows brute-force attacks on the passwords of users not in the administrator group.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12020-12-02Record published in the CVE List.
2. Version 22024-08-04Most recent update recorded in the CVE List.