Description
An attacker can use the unrestricted LDAP queries to determine configuration entries
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ForgeRock | Access Management | unspecified – < 6.5.5, unspecified – < 7.1.2, unspecified – < 7.2.0 | 6.5.5 |
High · 7.1
CVE-2022-24670
EUVD-2022-29542GHSA-rx5r-m3j5-w4mc
Any user can run unrestricted LDAP queries against a configuration endpoint
Published Oct 27, 2022 · Updated May 9, 2025 · Assigned by ForgeRock