CVE-2023-1656

—

CVSS 3.1

7.5 high

EPSS

<1%p28

Published

Mar 29, 2023 (Mar 29, 2023)

Modified

Jun 17, 2026

Description

Cleartext Transmission of Sensitive Information vulnerability in ForgeRock Inc. OpenIDM and Java Remote Connector Server (RCS) LDAP Connector on Windows, MacOS, Linux allows Remote Services with Stolen Credentials.This issue affects OpenIDM and Java Remote Connector Server (RCS): from 1.5.20.9 through 1.5.20.13.

Vendors: forgerock
Products: ldap connector
Weakness: CWE-319
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.