← CVE Intelligence

CVE-2022-0143

LDAP Connector: When startTLS is used then LDAP connector ignores the wrong password PUBLISHED

Description (CNA)

When the LDAP connector is started with StartTLS configured, unauthenticated access is granted. This issue affects: all versions of the LDAP connector prior to 1.5.20.9. The LDAP connector is bundled with Identity Management (IDM) and Remote Connector Server (RCS)

Affected (CNA)

Vendor / productVersions
ForgeRock / LDAP Connectoraffected unspecified before 1.5.20.9

CWE

CWE-284

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.