CVE-2023-1656
CVSS V2 None
CVSS V3 None
Description
Cleartext Transmission of Sensitive Information vulnerability in ForgeRock Inc. OpenIDM and Java Remote Connector Server (RCS) LDAP Connector on Windows, MacOS, Linux allows Remote Services with Stolen Credentials.This issue affects OpenIDM and Java Remote Connector Server (RCS): from 1.5.20.9 through 1.5.20.13.
Overview
- CVE ID
- CVE-2023-1656
- Assigner
- psirt@forgerock.com
- Vulnerability Status
- Analyzed
- Published Version
- 2023-03-29T20:15:07
- Last Modified Date
- 2023-04-06T17:33:53
Weakness Enumerations
CPE Configuration (Product)
| CPE | Vulnerable | Operator | Version Start | Version End |
|---|---|---|---|---|
| cpe:2.3:a:forgerock:ldap_connector:*:*:*:*:*:*:*:* | 1 | OR | 1.5.20.9 | 1.5.20.14 |
References
| Reference URL | Reference Tags |
|---|---|
| https://backstage.forgerock.com/downloads/browse/idm/all/productId:idm-connectors/subProductId:ldap/minorVersion:1.5/version:1.5.20.14 | Permissions Required |
| https://backstage.forgerock.com/knowledge/kb/article/a14149722 | Mitigation Vendor Advisory |
Sources
| Source Name | Source URL |
|---|---|
| NIST | https://nvd.nist.gov/vuln/detail/CVE-2023-1656 |
| MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1656 |
History
| Created | Old Value | New Value | Data Type | Notes |
|---|---|---|---|---|
| 2023-04-17 03:53:34 | Added to TrackCVE | |||
| 2023-04-17 03:53:37 | Weakness Enumeration | new |