Skip to main content

Ldap Connector

2 CVEs product

Monthly

CVE-2023-1656 Mar 29, 20:15 HIGH This Week

Cleartext Transmission of Sensitive Information vulnerability in ForgeRock Inc. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Java Information Disclosure Apple Microsoft Ldap Connector +1
NVD
CVSS 3.1
7.5
EPSS
0.3%
CVE-2022-0143 Sep 19, 22:15 CRITICAL PATCH Act Now

When the LDAP connector is started with StartTLS configured, unauthenticated access is granted. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Ldap Connector Forgerock
NVD
CVSS 3.1
9.8
EPSS
0.5%
EPSS 0% CVSS 7.5
HIGH This Week

Cleartext Transmission of Sensitive Information vulnerability in ForgeRock Inc. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Java Information Disclosure Apple +3
NVD
EPSS 1% CVSS 9.8
CRITICAL PATCH Act Now

When the LDAP connector is started with StartTLS configured, unauthenticated access is granted. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Ldap Connector Forgerock
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy