Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2022-24670

Any user can run unrestricted LDAP queries against a configuration endpoint

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ForgeRock

Description

An attacker can use the unrestricted LDAP queries to determine configuration entries

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ForgeRock Access Management

  • unspecified to < 6.5.5affected
  • unspecified to < 7.1.2affected
  • unspecified to < 7.2.0affected

References