01642 06 11 11 Arrange Call

Unauthenticated Access Vulnerability in LDAP Connector with StartTLS Configuration

CVE-2022-0143 · CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N

CVE-2022-0143

When the LDAP connector is started with StartTLS configured, unauthenticated access is granted. This issue affects: all versions of the LDAP connector prior to 1.5.20.9. The LDAP connector is bundled with Identity Management (IDM) and Remote Connector Server (RCS)

Learn more about our Cis Benchmark Audit For Server Software.