critical9.3
CVE-2022-0143
When the LDAP connector is started with StartTLS configured, unauthenticated access is granted.
Impact
When the LDAP connector is started with StartTLS configured, unauthenticated access is granted. This issue affects: all versions of the LDAP connector prior to 1.5.20.9. The LDAP connector is bundled with Identity Management (IDM) and Remote Connector Server (RCS)
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Forgerock | Ldap Connector | before 1.5.20.9 |