Skip to content
OpenAdvisories

Vendor

ForgeRock

9 known vulnerabilities.

Products

Access Management 5 Access Management Web Policy Agent 1 LDAP Connector 1 Access Management Java Policy Agent 1 OpenIDM and Java Remote Connector Server (RCS) 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.1
    CVE-2023-0582

    Path Traversal in ForgeRock Access Managment

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ForgeRock Access Management allows Authorization Bypass. This issue affects access management: before 7.3.0, before 7.2.1, before 7.1.4, through 7.0.2.

    ForgeRock Access Management
  • High 7.5
    CVE-2023-1656

    When the LDAP connector is started with StartTLS configured, LDAP BIND credentials are transmitted insecurely, prior to establishing the TLS connection.

    Cleartext Transmission of Sensitive Information vulnerability in ForgeRock Inc. OpenIDM and Java Remote Connector Server (RCS) LDAP Connector on Windows, MacOS, Linux allows Remote Services with Stolen Credentials.This issue affects OpenIDM and Java Remote Co…

    ForgeRock OpenIDM and Java Remote Connector Server (RCS)
  • High 7.1
    CVE-2022-24670

    Any user can run unrestricted LDAP queries against a configuration endpoint

    An attacker can use the unrestricted LDAP queries to determine configuration entries

    ForgeRock Access Management