CVE-2019-10008

CVE-2019-10008 is a high-severity privilege escalation vulnerability affecting Zoho ManageEngine ServiceDesk 9.3. It allows an authenticated guest user to elevate their privileges to administrator by entering the administrator's username with an incorrect password in a separate browser tab, effectively hijacking an existing guest session. With a CVSS score of 8.8, this vulnerability has a low attack complexity and can lead to full compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog, an exploit is publicly available on ExploitDB, though there is minimal community discussion or media coverage surrounding it.