CVE-2022-24670: ForgeRock Access Management

Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days.

An attacker can use the unrestricted LDAP queries to determine configuration entries

Affected products

• ForgeRock Access Management: from 6.0.0, up to and including 6.0.0.7; from 6.5.0, up to and including 6.5.0.2; from 6.5.2.1, up to and including 6.5.2.3; from 7.0.0, up to and including 7.0.2; version 6.5.1 only; version 6.5.3 only; …

Published 2022-10-27. Last modified 2026-06-17.