Lucene search

ForgeRockCVE-2023-1656

HistoryMar 29, 2023 - 8:15 p.m.

CVE-2023-1656

2023-03-2920:15:07

CWE-319

ForgeRock

web.nvd.nist.gov

cve-2023-1656

forgerock inc.

openidm

java remote connector server

rcs

ldap connector

cleartext transmission

sensitive information

vulnerability

remote services

stolen credentials

windows

macos

linux

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.002

Percentile

52.3%

JSON

Cleartext Transmission of Sensitive Information vulnerability in ForgeRock Inc. OpenIDM and Java Remote Connector Server (RCS) LDAP Connector on Windows, MacOS, Linux allows Remote Services with Stolen Credentials.This issue affects OpenIDM and Java Remote Connector Server (RCS): from 1.5.20.9 through 1.5.20.13.

Affected configurations

Nvd

Node

forgerockldap_connectorRange1.5.20.9–1.5.20.14

VendorProductVersionCPE
forgerockldap_connector*cpe:2.3:a:forgerock:ldap_connector:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
forgerock	ldap_connector	*	cpe:2.3:a:forgerock:ldap_connector::::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "packageName": "LDAP Connector",
    "platforms": [
      "Windows",
      "MacOS",
      "Linux"
    ],
    "product": "OpenIDM and Java Remote Connector Server (RCS)",
    "vendor": "ForgeRock Inc.",
    "versions": [
      {
        "lessThanOrEqual": "1.5.20.13",
        "status": "affected",
        "version": "1.5.20.9",
        "versionType": "custom"
      }
    ]
  }
]

References

backstage.forgerock.com/downloads/browse/idm/all/productId:idm-connectors/subProductId:ldap/minorVersion:1.5/version:1.5.20.14

backstage.forgerock.com/knowledge/kb/article/a14149722

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.002

Percentile

52.3%

JSON

Related for CVE-2023-1656