2 lines
3.2 KiB
JSON
2 lines
3.2 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","packageName":"LDAP Connector","platforms":["Windows","MacOS","Linux"],"product":"OpenIDM and Java Remote Connector Server (RCS)","vendor":"ForgeRock Inc.","versions":[{"lessThanOrEqual":"1.5.20.13","status":"affected","version":"1.5.20.9","versionType":"custom"}]}],"source":"psirt@forgerock.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:forgerock:ldap_connector:*:*:*:*:*:*:*:*","matchCriteriaId":"C6C49376-B78D-4BCF-A2A3-710F066094AF","versionEndExcluding":"1.5.20.14","versionStartIncluding":"1.5.20.9","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Cleartext Transmission of Sensitive Information vulnerability in ForgeRock Inc. OpenIDM and Java Remote Connector Server (RCS) LDAP Connector on Windows, MacOS, Linux allows Remote Services with Stolen Credentials.This issue affects OpenIDM and Java Remote Connector Server (RCS): from 1.5.20.9 through 1.5.20.13."}],"id":"CVE-2023-1656","lastModified":"2026-06-17T05:28:27.790","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.6,"impactScore":5.9,"source":"psirt@forgerock.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2023-1656","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2025-02-12T15:03:32.619480Z","version":"2.0.3"}}]},"published":"2023-03-29T20:15:07.393","references":[{"source":"psirt@forgerock.com","tags":["Permissions Required"],"url":"https://backstage.forgerock.com/downloads/browse/idm/all/productId:idm-connectors/subProductId:ldap/minorVersion:1.5/version:1.5.20.14"},{"source":"psirt@forgerock.com","tags":["Mitigation","Vendor Advisory"],"url":"https://backstage.forgerock.com/knowledge/kb/article/a14149722"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"],"url":"https://backstage.forgerock.com/downloads/browse/idm/all/productId:idm-connectors/subProductId:ldap/minorVersion:1.5/version:1.5.20.14"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Vendor Advisory"],"url":"https://backstage.forgerock.com/knowledge/kb/article/a14149722"}],"sourceIdentifier":"psirt@forgerock.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-319"}],"source":"psirt@forgerock.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-319"}],"source":"nvd@nist.gov","type":"Primary"}]}
|