Vulnerabilities > CVE-2022-36413 - Improper Restriction of Excessive Authentication Attempts vulnerability in Zohocorp Manageengine Adselfservice Plus

Summary

Zoho ManageEngine ADSelfService Plus through 6203 is vulnerable to a brute-force attack that leads to a password reset on IDM applications.

Vulnerable Configurations

Common Weakness Enumeration (CWE)

• CWE-307 - Improper Restriction of Excessive Authentication Attempts

References