← All advisories

High severity7.1NVD Advisory· Published Oct 27, 2022· Updated Jun 17, 2026

CVE-2022-24670

CVE-2022-24670

Description

An attacker can use the unrestricted LDAP queries to determine configuration entries

Affected products

8

Forgerock/Access Management7 versions
cpe:2.3:a:forgerock:access_management:*:*:*:*:*:*:*:*+ 6 more
- cpe:2.3:a:forgerock:access_management:*:*:*:*:*:*:*:*range: >=6.0.0,<=6.0.0.7
- cpe:2.3:a:forgerock:access_management:6.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:forgerock:access_management:6.5.3:*:*:*:*:*:*:*
- cpe:2.3:a:forgerock:access_management:6.5.4:*:*:*:*:*:*:*
- cpe:2.3:a:forgerock:access_management:7.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:forgerock:access_management:7.1.1:*:*:*:*:*:*:*
- (no CPE)range: unspecified
Forgerock/Backstagellm-create

Patches

Vulnerability mechanics

References

2

backstage.forgerock.com/knowledge/kb/article/a90639318nvdVendor Advisory
backstage.forgerock.com/downloads/browse/am/featurednvdProduct

News mentions

0

No linked articles in our index yet.