Openidm And Java Remote Connector Server (Rcs)
Approved changes feed: RSS · Atom
cpe:2.3:a:forgerock_inc.:openidm_and_java_remote_connector_server_(rcs):*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Forgerock Inc. (b31da4f3-e31d-5d9c-b90a-907e0745e15c) |
|---|---|
| Product | Openidm And Java Remote Connector Server (Rcs) (0bd6d8f7-faa8-50c4-9f6b-5d47f5b8181d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-1656 |
vulnerable | 2026-06-08 05:52:36.465028 |
When the LDAP connector is started with StartTLS configured, LDAP BIND credentials are transmitted insecurely, prior to establishing the TLS connection.
HIGH (7.5)
Cleartext Transmission of Sensitive Information vulnerability in ForgeRock Inc. OpenIDM and Java Remote Connector Server (RCS) LDAP Connector on Windows, MacOS, Linux allows Remote Services with Stolen Credentials.This issue affects OpenIDM and Java Remote Connector Server (RCS): from 1.5.20.9 through 1.5.20.13.
Published: 2023-03-29T19:55:13.974Z
Updated: 2025-04-14T17:04:02.162Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.