PT-2021-19235 · 1с · 1С:Предприятие+1

CVE-2021-3131

Published

2021-01-13

Updated

2025-07-30

CVSS v3.1

7.5

High

Vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions 1C:Enterprise 8 versions prior to 8.3.17.1851

Description The issue concerns the Web server in 1C:Enterprise 8, which sends base64 encoded credentials in the creds URL parameter.

Recommendations For versions prior to 8.3.17.1851, update to version 8.3.17.1851 or later to resolve the issue.

Exploit

Fix

Inadequate Encryption Strength

Found an issue in the description? Have something to add? Feel free to write us 👾

CVE-2021-3131

1С:Предприятие

1С