CVE-2023-1656

HIGH 7.5CVE-2023-1656 · Published 29/03/2023 · updated 17/06/2026

In short

CVE-2023-1656 is a HIGH (CVSS 7.5) vulnerability affecting ldap connector (forgerock).
Chance of exploitation in the next 30 days (EPSS): 0.35%, higher than 28.3% of all vulnerabilities.
Fix: update to 1.5.20.14 or later.

Package	Affected versions	Patched versions
ldap connector forgerock	`≥ 1.5.20.9, < 1.5.20.14`	`1.5.20.14`

Description

Cleartext Transmission of Sensitive Information vulnerability in ForgeRock Inc. OpenIDM and Java Remote Connector Server (RCS) LDAP Connector on Windows, MacOS, Linux allows Remote Services with Stolen Credentials.This issue affects OpenIDM and Java Remote Connector Server (RCS): from 1.5.20.9 through 1.5.20.13.

References

backstage.forgerock.com/downloads/browse/idm/all/productId:idm-connectors/subProductId:ldap/minorVersion:1.5/version:1.5.20.14 · Permissions Required
backstage.forgerock.com/knowledge/kb/article/a14149722 · Mitigation

More vulnerabilities in ldap connector

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free