CVE-2022-0143 Information

Description

When the LDAP connector is started with StartTLS configured unauthenticated access is granted. This issue affects: all versions of the LDAP connector prior to 1.5.20.9. The LDAP connector is bundled with Identity Management (IDM) and Remote Connector Server (RCS)

Reference

https://backstage.forgerock.com/downloads/browse/idm/featured/connectors https://backstage.forgerock.com/knowledge/kb/article/a11380515