An attacker can use the unrestricted LDAP queries to determine configuration entries
2022-10-27T17:15:09.813
2024-11-21T06:50:49.940
Modified
CVSSv3.1: 7.1 (HIGH)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | forgerock | access_management | ≤ 6.0.0.7 | Yes |
| Application | forgerock | access_management | ≤ 6.5.0.2 | Yes |
| Application | forgerock | access_management | ≤ 6.5.2.3 | Yes |
| Application | forgerock | access_management | ≤ 7.0.2 | Yes |
| Application | forgerock | access_management | 6.5.1 | Yes |
| Application | forgerock | access_management | 6.5.3 | Yes |
| Application | forgerock | access_management | 6.5.4 | Yes |
| Application | forgerock | access_management | 7.1.0 | Yes |
| Application | forgerock | access_management | 7.1.1 | Yes |