← Database

CVE-2022-0143

CRITICAL CVSS: 9.3 Published: 2022-09-19 Modified: 2026-06-17

Description

When the LDAP connector is started with StartTLS configured, unauthenticated access is granted. This issue affects: all versions of the LDAP connector prior to 1.5.20.9. The LDAP connector is bundled with Identity Management (IDM) and Remote Connector Server (RCS)

Affected Platforms

Forgerock Ldap Connector

Weakness Type

CWE-284, CWE-863

References