← Back

CVE-2022-36413

nvd nist
Published: Mar 23, 2023Modified: Jun 17, 2026

JSON object

Loading...
9.1
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Exploitability: 3.9 / Impact: 5.2
Source: NVD

Description

Zoho ManageEngine ADSelfService Plus through 6203 is vulnerable to a brute-force attack that leads to a password reset on IDM applications.

Affected (19)

Zohocorp
1 product
Manageengine Adselfservice Plus
Configuration A
19 vulnerable
Vulnerable SoftwareAffected Versions
Zohocorp
Manageengine Adselfservice Plus
Before 6.2
Manageengine Adselfservice Plus
Version 6.2 6200
Manageengine Adselfservice Plus
Version 6.2 6201
Manageengine Adselfservice Plus
Version 6.2 6202
Manageengine Adselfservice Plus
Version 6.2 6203
Manageengine Adselfservice Plus
Version 6.2 6204
Manageengine Adselfservice Plus
Version 6.2 6205
Manageengine Adselfservice Plus
Version 6.2 6206
Manageengine Adselfservice Plus
Version 6.2 6207
Manageengine Adselfservice Plus
Version 6.2 6208
Manageengine Adselfservice Plus
Version 6.2 6209
Manageengine Adselfservice Plus
Version 6.2 6210
Manageengine Adselfservice Plus
Version 6.2 6211
Manageengine Adselfservice Plus
Version 6.2 6212
Manageengine Adselfservice Plus
Version 6.2 6213
Manageengine Adselfservice Plus
Version 6.2 6214
Manageengine Adselfservice Plus
Version 6.2 6215
Manageengine Adselfservice Plus
Version 6.2 6216
Manageengine Adselfservice Plus
Version 6.2 6217

Related CWEs

CWE-307
Improper Restriction of Excessive Authentication Attempts
The product does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks.

References (2)

Source: cve@mitre.org
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.