Vulnerabilities (CVE)

Filtered by vendor Forgerock Subscribe
Filtered by product Racf Connector
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2016-6500 1 Forgerock 1 Racf Connector 2024-02-04 6.8 MEDIUM 8.1 HIGH
Unspecified methods in the RACF Connector component before 1.1.1.0 in ForgeRock OpenIDM and OpenICF improperly call the SearchControls constructor with returnObjFlag set to true, which allows remote attackers to execute arbitrary code via a crafted serialized Java object, aka LDAP entry poisoning.