CVE-2022-0143

Description

When the LDAP connector is started with StartTLS configured, unauthenticated access is granted. This issue affects: all versions of the LDAP connector prior to 1.5.20.9. The LDAP connector is bundled with Identity Management (IDM) and Remote Connector Server (RCS)

Related CPE's

aforgerockldap_connector********

References

https://backstage.forgerock.com/downloads/browse/idm/featured/connectors

PatchVendor Advisory

https://backstage.forgerock.com/knowledge/kb/article/a11380515

PatchVendor Advisory

CvssV3 impact

Could not find any metrics

CvssV2 impact

Could not find any metrics
Created by Yello
About Severity.io