CVE-2022-0143

When the LDAP connector is started with StartTLS configured, unauthenticated access is granted. This issue affects: all versions of the LDAP connector prior to 1.5.20.9. The LDAP connector is bundled with Identity Management (IDM) and Remote Connector Server (RCS)

Score

CVSS 3.1 9.8 Critical

Status

Modified - psirt@forgerock.com

Published

2022-09-19

Last modified

2025-05-29

Weaknesses

CWE-284, CWE-863

Affected products

• Ldap Connector (Forgerock)

References

• https://backstage.forgerock.com/downloads/browse/idm/featured/connectors
• https://backstage.forgerock.com/knowledge/kb/article/a11380515