https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-34891.htmlhttps://patchthecve.com/cve/CVE-2024-34891.htmlSun, 05 Jul 2026 01:19:48 +0000MEDIUM 6.8: Insufficiently protected credentials in DAV server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to read Exchange account passwords via HTTP GET request.https://patchthecve.com/cve/CVE-2024-34885.htmlhttps://patchthecve.com/cve/CVE-2024-34885.htmlSun, 05 Jul 2026 01:19:47 +0000MEDIUM 6.8: Insufficiently protected credentials in SMTP server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to read SMTP accounts passwords via HTTP GET request.https://patchthecve.com/cve/CVE-2024-34887.htmlhttps://patchthecve.com/cve/CVE-2024-34887.htmlSun, 05 Jul 2026 01:19:47 +0000MEDIUM 4.9: Insufficiently protected credentials in AD/LDAP server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to send AD/LDAP administrators account passwords to an arbitrary server via HTTP POST request.https://patchthecve.com/cve/CVE-2024-34883.htmlhttps://patchthecve.com/cve/CVE-2024-34883.htmlSun, 05 Jul 2026 01:19:46 +0000MEDIUM 4.9: Insufficiently protected credentials in DAV server settings in 1C-Bitrix Bitrix24 23.300.100 allow remote administrators to read proxy-server accounts passwords via HTTP GET request.https://patchthecve.com/cve/CVE-2024-34882.htmlhttps://patchthecve.com/cve/CVE-2024-34882.htmlSun, 05 Jul 2026 01:19:46 +0000MEDIUM 4.9: Insufficiently protected credentials in SMTP server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to send SMTP account passwords to an arbitrary server via HTTP POST request.