CVE:CVE-2023-28342
CNNVD:CNNVD-202304-285
ZOHO ManageEngine ADSelfService Plus是美国卓豪（ZOHO）公司的针对 Active Directory 和云应用程序的集成式自助密码管理和单点登录解决方案。
ZOHO ManageEngine ADSelfService Plus 6218之前版本存在安全漏洞，该漏洞源于允许任何人通过移动应用身份验证API进行拒绝服务攻击。
solution:Upgrade zohocorp manageengine_adselfservice_plus to a higher version than 4.5:4510,4.5:4511,4.5:4520,4.5:4522,4.5:4531,4.5:4540,4.5:4543,4.5:4544,4.5:4550,4.5:4560,4.5:4570,4.5:4571,4.5:4572,4.5:4580,4.5:4590,4.5:4591,4.5:4592,5.0:5000,5.0:5001,5.0:5002,5.0:5010,5.0:5011,5.0:5020,5.0:5021,5.0:5022,5.0:5030,5.0:5032,5.0:5040,5.0:5041,5.0.6,5.1:5100,5.1:5101,5.1:5102,5.1:5103,5.1:5104,5.1:5105,5.1:5106,5.1:5107,5.1:5108,5.1:5109,5.1:5110,5.1:5111,5.1:5112,5.1:5113,5.1:5114,5.1:5115,5.1:5116,5.2:5200,5.2:5201,5.2:5202,5.2:5203,5.2:5204,5.2:5205,5.2:5206,5.2:5207,5.3:5300,5.3:5301,5.3:5302,5.3:5303,5.3:5304,5.3:5305,5.3:5306,5.3:5307,5.3:5308,5.3:5309,5.3:5310,5.3:5311,5.3:5312,5.3:5313,5.3:5314,5.3:5315,5.3:5316,5.3:5317,5.3:5318,5.3:5319,5.3:5320,5.3:5321,5.3:5322,5.3:5323,5.3:5324,5.3:5325,5.3:5326,5.3:5327,5.3:5328,5.3:5329,5.3:5330,5.4:5400,5.5,5.5:5500,5.5:5501,5.5:5502,5.5:5503,5.5:5504,5.5:5505,5.5:5506,5.5:5507,5.5:5508,5.5:5509,5.5:5510,5.5:5511,5.5:5512,5.5:5513,5.5:5514,5.5:5515,5.5:5516,5.5:5517,5.5:5518,5.5:5519,5.5:5520,5.5:5521,5.6:5600,5.6:5601,5.6:5602,5.6:5603,5.6:5604,5.6:5605,5.6:5606,5.6:5607,5.7:5607,5.7:5700,5.7:5701,5.7:5702,5.7:5703,5.7:5704,5.7:5705,5.7:5706,5.7:5707,5.7:5708,5.7:5709,5.7:5710,5.8,5.8:5800,5.8:5801,5.8:5802,5.8:5803,5.8:5804,5.8:5805,5.8:5806,5.8:5807,5.8:5808,5.8:5809,5.8:5810,5.8:5811,5.8:5812,5.8:5813,5.8:5814,5.8:5815,5.8:5816,6.0,6.0:6000,6.0:6001,6.0:6002,6.0:6003,6.0:6004,6.0:6005,6.0:6006,6.0:6007,6.0:6008,6.0:6009,6.0:6012,6.0:6013,6.1,6.1:6100,6.1:6101,6.1:6102,6.1:6103,6.1:6104,6.1:6105,6.1:6106,6.1:6107,6.1:6108,6.1:6109,6.1:6110,6.1:6111,6.1:6112,6.1:6113,6.1:6114,6.1:6115,6.1:6116,6.1:6117,6.1:6118,6.1:6119,6.1:6120,6.1:6121,6.1:6122,6.1:6123,6.2:6200,6.2:6201,6.2:6202,6.2:6203,6.2:6204,6.2:6205,6.2:6206,6.2:6207,6.2:6208,6.2:6209,6.2:6210,6.2:6211,6.2:6212,6.2:6213,6.2:6214,6.2:6215,6.2:6216,6.2:6217,and avoid the version 4.5:4510,4.5:4511,4.5:4520,4.5:4522,4.5:4531,4.5:4540,4.5:4543,4.5:4544,4.5:4550,4.5:4560,4.5:4570,4.5:4571,4.5:4572,4.5:4580,4.5:4590,4.5:4591,4.5:4592,5.0:5000,5.0:5001,5.0:5002,5.0:5010,5.0:5011,5.0:5020,5.0:5021,5.0:5022,5.0:5030,5.0:5032,5.0:5040,5.0:5041,5.0.6,5.1:5100,5.1:5101,5.1:5102,5.1:5103,5.1:5104,5.1:5105,5.1:5106,5.1:5107,5.1:5108,5.1:5109,5.1:5110,5.1:5111,5.1:5112,5.1:5113,5.1:5114,5.1:5115,5.1:5116,5.2:5200,5.2:5201,5.2:5202,5.2:5203,5.2:5204,5.2:5205,5.2:5206,5.2:5207,5.3:5300,5.3:5301,5.3:5302,5.3:5303,5.3:5304,5.3:5305,5.3:5306,5.3:5307,5.3:5308,5.3:5309,5.3:5310,5.3:5311,5.3:5312,5.3:5313,5.3:5314,5.3:5315,5.3:5316,5.3:5317,5.3:5318,5.3:5319,5.3:5320,5.3:5321,5.3:5322,5.3:5323,5.3:5324,5.3:5325,5.3:5326,5.3:5327,5.3:5328,5.3:5329,5.3:5330,5.4:5400,5.5,5.5:5500,5.5:5501,5.5:5502,5.5:5503,5.5:5504,5.5:5505,5.5:5506,5.5:5507,5.5:5508,5.5:5509,5.5:5510,5.5:5511,5.5:5512,5.5:5513,5.5:5514,5.5:5515,5.5:5516,5.5:5517,5.5:5518,5.5:5519,5.5:5520,5.5:5521,5.6:5600,5.6:5601,5.6:5602,5.6:5603,5.6:5604,5.6:5605,5.6:5606,5.6:5607,5.7:5607,5.7:5700,5.7:5701,5.7:5702,5.7:5703,5.7:5704,5.7:5705,5.7:5706,5.7:5707,5.7:5708,5.7:5709,5.7:5710,5.8,5.8:5800,5.8:5801,5.8:5802,5.8:5803,5.8:5804,5.8:5805,5.8:5806,5.8:5807,5.8:5808,5.8:5809,5.8:5810,5.8:5811,5.8:5812,5.8:5813,5.8:5814,5.8:5815,5.8:5816,6.0,6.0:6000,6.0:6001,6.0:6002,6.0:6003,6.0:6004,6.0:6005,6.0:6006,6.0:6007,6.0:6008,6.0:6009,6.0:6012,6.0:6013,6.1,6.1:6100,6.1:6101,6.1:6102,6.1:6103,6.1:6104,6.1:6105,6.1:6106,6.1:6107,6.1:6108,6.1:6109,6.1:6110,6.1:6111,6.1:6112,6.1:6113,6.1:6114,6.1:6115,6.1:6116,6.1:6117,6.1:6118,6.1:6119,6.1:6120,6.1:6121,6.1:6122,6.1:6123,6.2:6200,6.2:6201,6.2:6202,6.2:6203,6.2:6204,6.2:6205,6.2:6206,6.2:6207,6.2:6208,6.2:6209,6.2:6210,6.2:6211,6.2:6212,6.2:6213,6.2:6214,6.2:6215,6.2:6216,6.2:6217