Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2022-0143

LDAP Connector: When startTLS is used then LDAP connector ignores the wrong password

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ForgeRock

Description

When the LDAP connector is started with StartTLS configured, unauthenticated access is granted. This issue affects: all versions of the LDAP connector prior to 1.5.20.9. The LDAP connector is bundled with Identity Management (IDM) and Remote Connector Server (RCS)

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ForgeRock LDAP Connector

  • unspecified to < 1.5.20.9affected

References