cvedb.io
CVE-2022-0143
CRITICAL · CVSS 9.3
EPSS exploitation probability: 0%
Published 2022-09-19T22:15:10.843 · Last modified 2026-06-17T04:20:02.710

Summary

When the LDAP connector is started with StartTLS configured, unauthenticated access is granted. This issue affects: all versions of the LDAP connector prior to 1.5.20.9. The LDAP connector is bundled with Identity Management (IDM) and Remote Connector Server (RCS)

Affected products

forgerock — ldap_connector

Does this affect you?

Add your gear to cvedb and we'll alert you only when forgerock ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.