CVE-2023-28342: High severity adselfservice plus vulnerability

Published Apr 5, 2023
ยท
Updated

Zoho ManageEngine ADSelfService Plus before 6218 allows anyone to conduct a Denial-of-Service attack via the Mobile App Authentication API.

Affected Software

204 affected components
ZohoCorp ManageEngine ADSelfService Plus=4.5-4510
ZohoCorp ManageEngine ADSelfService Plus=4.5-4511
ZohoCorp ManageEngine ADSelfService Plus=4.5-4520
ZohoCorp ManageEngine ADSelfService Plus=4.5-4522
ZohoCorp ManageEngine ADSelfService Plus=4.5-4531
ZohoCorp ManageEngine ADSelfService Plus=4.5-4540
ZohoCorp ManageEngine ADSelfService Plus=4.5-4543
ZohoCorp ManageEngine ADSelfService Plus=4.5-4544
ZohoCorp ManageEngine ADSelfService Plus=4.5-4550
ZohoCorp ManageEngine ADSelfService Plus=4.5-4560
ZohoCorp ManageEngine ADSelfService Plus=4.5-4570
ZohoCorp ManageEngine ADSelfService Plus=4.5-4571
ZohoCorp ManageEngine ADSelfService Plus=4.5-4572
ZohoCorp ManageEngine ADSelfService Plus=4.5-4580
ZohoCorp ManageEngine ADSelfService Plus=4.5-4590
ZohoCorp ManageEngine ADSelfService Plus=4.5-4591
ZohoCorp ManageEngine ADSelfService Plus=4.5-4592
ZohoCorp ManageEngine ADSelfService Plus=5.0-5000
ZohoCorp ManageEngine ADSelfService Plus=5.0-5001
ZohoCorp ManageEngine ADSelfService Plus=5.0-5002
ZohoCorp ManageEngine ADSelfService Plus=5.0-5010
ZohoCorp ManageEngine ADSelfService Plus=5.0-5011
ZohoCorp ManageEngine ADSelfService Plus=5.0-5020
ZohoCorp ManageEngine ADSelfService Plus=5.0-5021
ZohoCorp ManageEngine ADSelfService Plus=5.0-5022
ZohoCorp ManageEngine ADSelfService Plus=5.0-5030
ZohoCorp ManageEngine ADSelfService Plus=5.0-5032
ZohoCorp ManageEngine ADSelfService Plus=5.0-5040
ZohoCorp ManageEngine ADSelfService Plus=5.0-5041
ZohoCorp ManageEngine ADSelfService Plus=5.0.6
ZohoCorp ManageEngine ADSelfService Plus=5.1-5100
ZohoCorp ManageEngine ADSelfService Plus=5.1-5101
ZohoCorp ManageEngine ADSelfService Plus=5.1-5102
ZohoCorp ManageEngine ADSelfService Plus=5.1-5103
ZohoCorp ManageEngine ADSelfService Plus=5.1-5104
ZohoCorp ManageEngine ADSelfService Plus=5.1-5105
ZohoCorp ManageEngine ADSelfService Plus=5.1-5106
ZohoCorp ManageEngine ADSelfService Plus=5.1-5107
ZohoCorp ManageEngine ADSelfService Plus=5.1-5108
ZohoCorp ManageEngine ADSelfService Plus=5.1-5109
ZohoCorp ManageEngine ADSelfService Plus=5.1-5110
ZohoCorp ManageEngine ADSelfService Plus=5.1-5111
ZohoCorp ManageEngine ADSelfService Plus=5.1-5112
ZohoCorp ManageEngine ADSelfService Plus=5.1-5113
ZohoCorp ManageEngine ADSelfService Plus=5.1-5114
ZohoCorp ManageEngine ADSelfService Plus=5.1-5115
ZohoCorp ManageEngine ADSelfService Plus=5.1-5116
ZohoCorp ManageEngine ADSelfService Plus=5.2-5200
ZohoCorp ManageEngine ADSelfService Plus=5.2-5201
ZohoCorp ManageEngine ADSelfService Plus=5.2-5202
ZohoCorp ManageEngine ADSelfService Plus=5.2-5203
ZohoCorp ManageEngine ADSelfService Plus=5.2-5204
ZohoCorp ManageEngine ADSelfService Plus=5.2-5205
ZohoCorp ManageEngine ADSelfService Plus=5.2-5206
ZohoCorp ManageEngine ADSelfService Plus=5.2-5207
ZohoCorp ManageEngine ADSelfService Plus=5.3-5300
ZohoCorp ManageEngine ADSelfService Plus=5.3-5301
ZohoCorp ManageEngine ADSelfService Plus=5.3-5302
ZohoCorp ManageEngine ADSelfService Plus=5.3-5303
ZohoCorp ManageEngine ADSelfService Plus=5.3-5304
ZohoCorp ManageEngine ADSelfService Plus=5.3-5305
ZohoCorp ManageEngine ADSelfService Plus=5.3-5306
ZohoCorp ManageEngine ADSelfService Plus=5.3-5307
ZohoCorp ManageEngine ADSelfService Plus=5.3-5308
ZohoCorp ManageEngine ADSelfService Plus=5.3-5309
ZohoCorp ManageEngine ADSelfService Plus=5.3-5310
ZohoCorp ManageEngine ADSelfService Plus=5.3-5311
ZohoCorp ManageEngine ADSelfService Plus=5.3-5312
ZohoCorp ManageEngine ADSelfService Plus=5.3-5313
ZohoCorp ManageEngine ADSelfService Plus=5.3-5314
ZohoCorp ManageEngine ADSelfService Plus=5.3-5315
ZohoCorp ManageEngine ADSelfService Plus=5.3-5316
ZohoCorp ManageEngine ADSelfService Plus=5.3-5317
ZohoCorp ManageEngine ADSelfService Plus=5.3-5318
ZohoCorp ManageEngine ADSelfService Plus=5.3-5319
ZohoCorp ManageEngine ADSelfService Plus=5.3-5320
ZohoCorp ManageEngine ADSelfService Plus=5.3-5321
ZohoCorp ManageEngine ADSelfService Plus=5.3-5322
ZohoCorp ManageEngine ADSelfService Plus=5.3-5323
ZohoCorp ManageEngine ADSelfService Plus=5.3-5324
ZohoCorp ManageEngine ADSelfService Plus=5.3-5325
ZohoCorp ManageEngine ADSelfService Plus=5.3-5326
ZohoCorp ManageEngine ADSelfService Plus=5.3-5327
ZohoCorp ManageEngine ADSelfService Plus=5.3-5328
ZohoCorp ManageEngine ADSelfService Plus=5.3-5329
ZohoCorp ManageEngine ADSelfService Plus=5.3-5330
ZohoCorp ManageEngine ADSelfService Plus=5.4-5400
ZohoCorp ManageEngine ADSelfService Plus=5.5
ZohoCorp ManageEngine ADSelfService Plus=5.5-5500
ZohoCorp ManageEngine ADSelfService Plus=5.5-5501
ZohoCorp ManageEngine ADSelfService Plus=5.5-5502
ZohoCorp ManageEngine ADSelfService Plus=5.5-5503
ZohoCorp ManageEngine ADSelfService Plus=5.5-5504
ZohoCorp ManageEngine ADSelfService Plus=5.5-5505
ZohoCorp ManageEngine ADSelfService Plus=5.5-5506
ZohoCorp ManageEngine ADSelfService Plus=5.5-5507
ZohoCorp ManageEngine ADSelfService Plus=5.5-5508
ZohoCorp ManageEngine ADSelfService Plus=5.5-5509
ZohoCorp ManageEngine ADSelfService Plus=5.5-5510
ZohoCorp ManageEngine ADSelfService Plus=5.5-5511
ZohoCorp ManageEngine ADSelfService Plus=5.5-5512
ZohoCorp ManageEngine ADSelfService Plus=5.5-5513
ZohoCorp ManageEngine ADSelfService Plus=5.5-5514
ZohoCorp ManageEngine ADSelfService Plus=5.5-5515
ZohoCorp ManageEngine ADSelfService Plus=5.5-5516
ZohoCorp ManageEngine ADSelfService Plus=5.5-5517
ZohoCorp ManageEngine ADSelfService Plus=5.5-5518
ZohoCorp ManageEngine ADSelfService Plus=5.5-5519
ZohoCorp ManageEngine ADSelfService Plus=5.5-5520
ZohoCorp ManageEngine ADSelfService Plus=5.5-5521
ZohoCorp ManageEngine ADSelfService Plus=5.6-5600
ZohoCorp ManageEngine ADSelfService Plus=5.6-5601
ZohoCorp ManageEngine ADSelfService Plus=5.6-5602
ZohoCorp ManageEngine ADSelfService Plus=5.6-5603
ZohoCorp ManageEngine ADSelfService Plus=5.6-5604
ZohoCorp ManageEngine ADSelfService Plus=5.6-5605
ZohoCorp ManageEngine ADSelfService Plus=5.6-5606
ZohoCorp ManageEngine ADSelfService Plus=5.6-5607
ZohoCorp ManageEngine ADSelfService Plus=5.7-5607
ZohoCorp ManageEngine ADSelfService Plus=5.7-5700
ZohoCorp ManageEngine ADSelfService Plus=5.7-5701
ZohoCorp ManageEngine ADSelfService Plus=5.7-5702
ZohoCorp ManageEngine ADSelfService Plus=5.7-5703
ZohoCorp ManageEngine ADSelfService Plus=5.7-5704
ZohoCorp ManageEngine ADSelfService Plus=5.7-5705
ZohoCorp ManageEngine ADSelfService Plus=5.7-5706
ZohoCorp ManageEngine ADSelfService Plus=5.7-5707
ZohoCorp ManageEngine ADSelfService Plus=5.7-5708
ZohoCorp ManageEngine ADSelfService Plus=5.7-5709
ZohoCorp ManageEngine ADSelfService Plus=5.7-5710
ZohoCorp ManageEngine ADSelfService Plus=5.8
ZohoCorp ManageEngine ADSelfService Plus=5.8-5800
ZohoCorp ManageEngine ADSelfService Plus=5.8-5801
ZohoCorp ManageEngine ADSelfService Plus=5.8-5802
ZohoCorp ManageEngine ADSelfService Plus=5.8-5803
ZohoCorp ManageEngine ADSelfService Plus=5.8-5804
ZohoCorp ManageEngine ADSelfService Plus=5.8-5805
ZohoCorp ManageEngine ADSelfService Plus=5.8-5806
ZohoCorp ManageEngine ADSelfService Plus=5.8-5807
ZohoCorp ManageEngine ADSelfService Plus=5.8-5808
ZohoCorp ManageEngine ADSelfService Plus=5.8-5809
ZohoCorp ManageEngine ADSelfService Plus=5.8-5810
ZohoCorp ManageEngine ADSelfService Plus=5.8-5811
ZohoCorp ManageEngine ADSelfService Plus=5.8-5812
ZohoCorp ManageEngine ADSelfService Plus=5.8-5813
ZohoCorp ManageEngine ADSelfService Plus=5.8-5814
ZohoCorp ManageEngine ADSelfService Plus=5.8-5815
ZohoCorp ManageEngine ADSelfService Plus=5.8-5816
ZohoCorp ManageEngine ADSelfService Plus=6.0
ZohoCorp ManageEngine ADSelfService Plus=6.0-6000
ZohoCorp ManageEngine ADSelfService Plus=6.0-6001
ZohoCorp ManageEngine ADSelfService Plus=6.0-6002
ZohoCorp ManageEngine ADSelfService Plus=6.0-6003
ZohoCorp ManageEngine ADSelfService Plus=6.0-6004
ZohoCorp ManageEngine ADSelfService Plus=6.0-6005
ZohoCorp ManageEngine ADSelfService Plus=6.0-6006
ZohoCorp ManageEngine ADSelfService Plus=6.0-6007
ZohoCorp ManageEngine ADSelfService Plus=6.0-6008
ZohoCorp ManageEngine ADSelfService Plus=6.0-6009
ZohoCorp ManageEngine ADSelfService Plus=6.0-6012
ZohoCorp ManageEngine ADSelfService Plus=6.0-6013
ZohoCorp ManageEngine ADSelfService Plus=6.1
ZohoCorp ManageEngine ADSelfService Plus=6.1-6100
ZohoCorp ManageEngine ADSelfService Plus=6.1-6101
ZohoCorp ManageEngine ADSelfService Plus=6.1-6102
ZohoCorp ManageEngine ADSelfService Plus=6.1-6103
ZohoCorp ManageEngine ADSelfService Plus=6.1-6104
ZohoCorp ManageEngine ADSelfService Plus=6.1-6105
ZohoCorp ManageEngine ADSelfService Plus=6.1-6106
ZohoCorp ManageEngine ADSelfService Plus=6.1-6107
ZohoCorp ManageEngine ADSelfService Plus=6.1-6108
ZohoCorp ManageEngine ADSelfService Plus=6.1-6109
ZohoCorp ManageEngine ADSelfService Plus=6.1-6110
ZohoCorp ManageEngine ADSelfService Plus=6.1-6111
ZohoCorp ManageEngine ADSelfService Plus=6.1-6112
ZohoCorp ManageEngine ADSelfService Plus=6.1-6113
ZohoCorp ManageEngine ADSelfService Plus=6.1-6114
ZohoCorp ManageEngine ADSelfService Plus=6.1-6115
ZohoCorp ManageEngine ADSelfService Plus=6.1-6116
ZohoCorp ManageEngine ADSelfService Plus=6.1-6117
ZohoCorp ManageEngine ADSelfService Plus=6.1-6118
ZohoCorp ManageEngine ADSelfService Plus=6.1-6119
ZohoCorp ManageEngine ADSelfService Plus=6.1-6120
ZohoCorp ManageEngine ADSelfService Plus=6.1-6121
ZohoCorp ManageEngine ADSelfService Plus=6.1-6122
ZohoCorp ManageEngine ADSelfService Plus=6.1-6123
ZohoCorp ManageEngine ADSelfService Plus=6.2-6200
ZohoCorp ManageEngine ADSelfService Plus=6.2-6201
ZohoCorp ManageEngine ADSelfService Plus=6.2-6202
ZohoCorp ManageEngine ADSelfService Plus=6.2-6203
ZohoCorp ManageEngine ADSelfService Plus=6.2-6204
ZohoCorp ManageEngine ADSelfService Plus=6.2-6205
ZohoCorp ManageEngine ADSelfService Plus=6.2-6206
ZohoCorp ManageEngine ADSelfService Plus=6.2-6207
ZohoCorp ManageEngine ADSelfService Plus=6.2-6208
ZohoCorp ManageEngine ADSelfService Plus=6.2-6209
ZohoCorp ManageEngine ADSelfService Plus=6.2-6210
ZohoCorp ManageEngine ADSelfService Plus=6.2-6211
ZohoCorp ManageEngine ADSelfService Plus=6.2-6212
ZohoCorp ManageEngine ADSelfService Plus=6.2-6213
ZohoCorp ManageEngine ADSelfService Plus=6.2-6214
ZohoCorp ManageEngine ADSelfService Plus=6.2-6215
ZohoCorp ManageEngine ADSelfService Plus=6.2-6216
ZohoCorp ManageEngine ADSelfService Plus=6.2-6217

Event History

Apr 5, 2023
CVE Published
via MITREยท12:00 AM
Data Sourced
via MITREยท12:00 AM
Description
Data Sourced
via NVDยท07:15 PM
DescriptionSeverityWeaknessAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2023-28342?

CVE-2023-28342 is classified as a high severity vulnerability due to its potential to allow Denial-of-Service attacks.

2

How do I fix CVE-2023-28342?

To fix CVE-2023-28342, it is recommended to upgrade to the latest version of Zoho ManageEngine ADSelfService Plus.

3

Which versions of ManageEngine ADSelfService Plus are affected by CVE-2023-28342?

Versions before 6218, including 4.5-4510, 4.5-4511, and various 5.x and 6.x versions, are affected by CVE-2023-28342.

4

What kind of attack can be executed using CVE-2023-28342?

CVE-2023-28342 allows an attacker to conduct a Denial-of-Service attack through the Mobile App Authentication API.

5

Is there a workaround for CVE-2023-28342 before applying the fix?

Currently, the best course of action is to apply the security patch or upgrade ManageEngine ADSelfService Plus to mitigate CVE-2023-28342.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
ยฉ 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203