CVE-2023-1656: ForgeRock LDAP Connector

High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Cleartext Transmission of Sensitive Information vulnerability in ForgeRock Inc. OpenIDM and Java Remote Connector Server (RCS) LDAP Connector on Windows, MacOS, Linux allows Remote Services with Stolen Credentials.This issue affects OpenIDM and Java Remote Connector Server (RCS): from 1.5.20.9 through 1.5.20.13.

Affected products

• ForgeRock LDAP Connector: from 1.5.20.9, before 1.5.20.14 (fixed in 1.5.20.14)

Published 2023-03-29. Last modified 2026-06-17.