Vulnerability Details CVE-2023-1656
Cleartext Transmission of Sensitive Information vulnerability in ForgeRock Inc. OpenIDM and Java Remote Connector Server (RCS) LDAP Connector on Windows, MacOS, Linux allows Remote Services with Stolen Credentials.This issue affects OpenIDM and Java Remote Connector Server (RCS): from 1.5.20.9 through 1.5.20.13.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 29.6%
CVSS Severity
CVSS v3 Score 7.5
References
- https://backstage.forgerock.com/downloads/browse/idm/all/productId:idm-connectors/subProductId:ldap/minorVersion:1.5/version:1.5.20.14
- https://backstage.forgerock.com/knowledge/kb/article/a14149722
- https://backstage.forgerock.com/downloads/browse/idm/all/productId:idm-connectors/subProductId:ldap/minorVersion:1.5/version:1.5.20.14
- https://backstage.forgerock.com/knowledge/kb/article/a14149722
Products affected by CVE-2023-1656
-
cpe:2.3:a:forgerock:ldap_connector:1.5.20.10
-
cpe:2.3:a:forgerock:ldap_connector:1.5.20.11
-
cpe:2.3:a:forgerock:ldap_connector:1.5.20.12
-
cpe:2.3:a:forgerock:ldap_connector:1.5.20.13
-
cpe:2.3:a:forgerock:ldap_connector:1.5.20.9