CVE-2023-1656 When the LDAP connector is started with StartTLS configured, LDAP BIND credentials are transmitted insecurely, prior to establishing the TLS connection.

[
  {
    "defaultStatus": "unaffected",
    "packageName": "LDAP Connector",
    "platforms": [
      "Windows",
      "MacOS",
      "Linux"
    ],
    "product": "OpenIDM and Java Remote Connector Server (RCS)",
    "vendor": "ForgeRock Inc.",
    "versions": [
      {
        "lessThanOrEqual": "1.5.20.13",
        "status": "affected",
        "version": "1.5.20.9",
        "versionType": "custom"
      }
    ]
  }
]