CVE-2019-10008

Zoho ManageEngine ServiceDesk 9.3 allows session hijacking and privilege escalation because an established guest session is automatically converted into an established administrator session when the guest user enters the administrator username, with an arbitrary incorrect password, in an mc/ login attempt within a different browser tab.

CVSS v3 8.8 HIGH
CVSS v2.0 6.5 MEDIUM

8.8^/10

CVSS v3 : HIGH

Vector : AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

6.5^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability : 8.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
https://www.exploit-db.com/exploits/46659	Exploit Third Party Advisory VDB Entry
https://www.manageengine.com/products/service-desk/readme.html	Release Notes Vendor Advisory
https://www.exploit-db.com/exploits/46659	Exploit Third Party Advisory VDB Entry
https://www.manageengine.com/products/service-desk/readme.html	Release Notes Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:zohocorp:servicedesk_plus:9.3:*:*:*:*:*:*:*

History

21 Nov 2024, 04:18

Type	Values Removed	Values Added
References	~~() https://www.exploit-db.com/exploits/46659 - Exploit, Third Party Advisory, VDB Entry~~	() https://www.exploit-db.com/exploits/46659 - Exploit, Third Party Advisory, VDB Entry
References	~~() https://www.manageengine.com/products/service-desk/readme.html - Release Notes, Vendor Advisory~~	() https://www.manageengine.com/products/service-desk/readme.html - Release Notes, Vendor Advisory

Information

Published : 2019-04-24 19:29

Updated : 2024-11-21 04:18

NVD link : CVE-2019-10008

Mitre link : CVE-2019-10008

CVE.ORG link : CVE-2019-10008

JSON object : View

Products Affected

zohocorp

servicedesk_plus

CWE

CWE-384

Session Fixation

{"id": "CVE-2019-10008", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "published": "2019-04-24T19:29:00.907", "references": [{"url": "https://www.exploit-db.com/exploits/46659", "tags": ["Exploit", "Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "https://www.manageengine.com/products/service-desk/readme.html", "tags": ["Release Notes", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://www.exploit-db.com/exploits/46659", "tags": ["Exploit", "Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.manageengine.com/products/service-desk/readme.html", "tags": ["Release Notes", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-384"}]}], "descriptions": [{"lang": "en", "value": "Zoho ManageEngine ServiceDesk 9.3 allows session hijacking and privilege escalation because an established guest session is automatically converted into an established administrator session when the guest user enters the administrator username, with an arbitrary incorrect password, in an mc/ login attempt within a different browser tab."}, {"lang": "es", "value": "Zoho ManageEngine ServiceDesk versi\u00f3n 9.3 permite el secuestro de sesi\u00f3n y la escalada de privilegios porque una sesi\u00f3n de invitado establecida se convierte autom\u00e1ticamente en una sesi\u00f3n de administrador establecida cuando el usuario invitado ingresa el nombre de usuario del administrador, con un contrase\u00f1a incorrecta arbitraria, en un intento mc/login dentro de una pesta\u00f1a diferente del navegador."}], "lastModified": "2024-11-21T04:18:12.293", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:zohocorp:servicedesk_plus:9.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C9E74052-6575-4CFF-9C93-BC462E7D2920"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}