Skip to content
OpenAdvisories
Critical · 9.3 CVE-2022-0143 EUVD-2022-15356GHSA-99pg-5rf4-r9x9

LDAP Connector: When startTLS is used then LDAP connector ignores the wrong password

Published Sep 19, 2022 · Updated May 29, 2025 · Assigned by ForgeRock

Vendor: ForgeRock Product: LDAP Connector

Description

When the LDAP connector is started with StartTLS configured, unauthenticated access is granted. This issue affects: all versions of the LDAP connector prior to 1.5.20.9. The LDAP connector is bundled with Identity Management (IDM) and Remote Connector Server (RCS)

Affected products

VendorProductAffectedFixed
ForgeRock LDAP Connector unspecified – < 1.5.20.9 1.5.20.9

References