CVE-2022-36413

Published: Mar 23, 2023
Updated: Apr 14, 2023
CVE: <a href="https://nvd.nist.gov/vuln/detail/CVE-2022-36413" target="_blank" rel="noopener"> CVE-2022-36413
Severity: Critical
Exploit:

Zoho ManageEngine ADSelfService Plus through 6203 is vulnerable to a brute-force attack that leads to a password reset on IDM applications.

CVSS v3:

CWEs:

Software	From	Fixed in
zohocorp / manageengine_adselfservice_plus	6.2-6201	6.2-6201.x
zohocorp / manageengine_adselfservice_plus	6.2-6202	6.2-6202.x
zohocorp / manageengine_adselfservice_plus	-	6.2
zohocorp / manageengine_adselfservice_plus	6.2-6200	6.2-6200.x
zohocorp / manageengine_adselfservice_plus	6.2-6203	6.2-6203.x
zohocorp / manageengine_adselfservice_plus	6.2-6204	6.2-6204.x
zohocorp / manageengine_adselfservice_plus	6.2-6205	6.2-6205.x
zohocorp / manageengine_adselfservice_plus	6.2-6206	6.2-6206.x
zohocorp / manageengine_adselfservice_plus	6.2-6207	6.2-6207.x
zohocorp / manageengine_adselfservice_plus	6.2-6208	6.2-6208.x
zohocorp / manageengine_adselfservice_plus	6.2-6209	6.2-6209.x
zohocorp / manageengine_adselfservice_plus	6.2-6210	6.2-6210.x
zohocorp / manageengine_adselfservice_plus	6.2-6211	6.2-6211.x
zohocorp / manageengine_adselfservice_plus	6.2-6212	6.2-6212.x
zohocorp / manageengine_adselfservice_plus	6.2-6213	6.2-6213.x
zohocorp / manageengine_adselfservice_plus	6.2-6214	6.2-6214.x
zohocorp / manageengine_adselfservice_plus	6.2-6215	6.2-6215.x
zohocorp / manageengine_adselfservice_plus	6.2-6216	6.2-6216.x
zohocorp / manageengine_adselfservice_plus	6.2-6217	6.2-6217.x