cvedb.io
CVE-2023-1656
HIGH · CVSS 7.5
EPSS exploitation probability: 0%
Published 2023-03-29T20:15:07.393 · Last modified 2026-06-17T05:28:27.790

Summary

Cleartext Transmission of Sensitive Information vulnerability in ForgeRock Inc. OpenIDM and Java Remote Connector Server (RCS) LDAP Connector on Windows, MacOS, Linux allows Remote Services with Stolen Credentials.This issue affects OpenIDM and Java Remote Connector Server (RCS): from 1.5.20.9 through 1.5.20.13.

Affected products

forgerock — ldap_connector

Does this affect you?

Add your gear to cvedb and we'll alert you only when forgerock ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.