Unrated severityNVD Advisory· Published Sep 19, 2022· Updated May 29, 2025

LDAP Connector: When startTLS is used then LDAP connector ignores the wrong password

CVE-2022-0143

Description

When the LDAP connector is started with StartTLS configured, unauthenticated access is granted. This issue affects: all versions of the LDAP connector prior to 1.5.20.9. The LDAP connector is bundled with Identity Management (IDM) and Remote Connector Server (RCS)

Affected products

Forgerock/LDAP connectorllm-create2 versions
<1.5.20.9+ 1 more
- (no CPE)range: <1.5.20.9
- (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

backstage.forgerock.com/downloads/browse/idm/featured/connectorsmitre
backstage.forgerock.com/knowledge/kb/article/a11380515mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000