[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fYkozu1_wlT2YCGh5Gj4E28ndKEdHVbQBWhmrilrAVhU":3,"g5a-risk:CVE-2019-10139":133},{"success":4,"data":5,"meta":131},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":50,"epssPercentile":26,"epssTimeSeries":51,"severity":52,"affectedProducts":53,"affectedProductsCount":59,"references":60,"referencesCount":40,"weaknesses":78,"weaknessesCount":93,"isActivelyExploited":94,"cisaInfo":26,"otxData":26,"relatedBlogPosts":95,"seoMetadata":96,"configurations":121,"relatedVendorCves":129,"notableEvents":130},"CVE-2019-10139","What is CVE-2019-10139?","During HE deployment via cockpit-ovirt, cockpit-ovirt generates an ansible variable file `\u002Fvar\u002Flib\u002Fovirt-hosted-engine-setup\u002Fcockpit\u002FansibleVarFileXXXXXX.var` which contains the admin and the appliance passwords as plain-text. At the of the deployment procedure, these files are deleted.","During HE deployment via cockpit-ovirt, cockpit-ovirt generates an ansible variable file `\u002Fvar\u002Flib\u002Fovirt-hosted-engine-setup\u002Fcockpit\u002FansibleVarFileXXXXXX.var...","2019-05-17T16:29:03.017","2023-02-12T23:32:55.177",7.8,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":29,"CVSSMetricV2":41,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","LOCAL","LOW","NONE","UNCHANGED","HIGH",null,1.8,5.9,[30],{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":39,"ImpactScore":40},"secalert@redhat.com","Secondary",{"Version":34,"VectorString":35,"AttackVector":21,"AttackComplexity":25,"PrivilegesRequired":22,"UserInteraction":23,"Scope":36,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":37,"BaseSeverity":38,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.0","CVSS:3.0\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:N\u002FA:N","CHANGED",5.6,"MEDIUM",1.1,4,[42],{"Source":17,"Type":18,"CVSSData":43,"BaseSeverity":22,"ExploitabilityScore":48,"ImpactScore":49,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":44,"VectorString":45,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":46,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":47,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:L\u002FAC:L\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",2.1,3.9,2.9,0.00245,[50,50,50,50,50,50,50],"High",[54],{"vendor":55,"product":56,"version":57,"criteria":58,"vulnerable":4},"ovirt","cockpit-ovirt","-","cpe:2.3:a:ovirt:cockpit-ovirt:-:*:*:*:*:*:*:*",1,[61,67,71,74],{"url":62,"source":63,"tags":64},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F108396","Securityfocus",[65,66],"Third Party Advisory","VDB Entry",{"url":68,"source":69,"tags":70},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2019:2433","Red Hat",[65],{"url":72,"source":69,"tags":73},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2019:2437",[65],{"url":75,"source":69,"tags":76},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=CVE-2019-10139",[77,65],"Issue Tracking",[79,87],{"id":80,"name":81,"description":82,"extendedDescription":83,"status":84,"abstraction":85,"structure":86},"CWE-311","Missing Encryption of Sensitive Data","The product does not encrypt sensitive or critical information before storage or transmission.","The lack of proper data encryption passes up the guarantees of confidentiality, integrity, and accountability that properly implemented encryption conveys.","Draft","Class","Simple",{"id":88,"name":89,"description":90,"extendedDescription":91,"status":92,"abstraction":85,"structure":86},"CWE-522","Insufficiently Protected Credentials","The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and\u002For retrieval.","","Incomplete",2,false,[],{"title":97,"metaDescription":98,"keywords":99,"canonicalUrl":100,"structuredData":101},"What is CVE-2019-10139? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-10139, a high severity cyber security vulnerability from 2019. During HE deployment via cockpit-ovirt, cockpit-ovirt gener...","CVE-2019-10139, CVE-2019-10139 vulnerability, CVE-2019-10139 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, ovirt security, cockpit-ovirt vulnerability","\u002Fwhat-is\u002Fcve-2019-10139",{"@context":102,"@type":103,"headline":97,"description":98,"datePublished":10,"dateModified":11,"author":104,"publisher":108,"about":112,"mainEntityOfPage":116,"articleSection":119,"keywords":120},"https:\u002F\u002Fschema.org","TechArticle",{"@type":105,"name":106,"url":107},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":105,"name":106,"url":107,"logo":109},{"@type":110,"url":111},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":113,"name":6,"description":114,"additionalType":115},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":117,"@id":118},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-10139","Cybersecurity","CVE-2019-10139, CVE-2019-10139 vulnerability, CVE-2019-10139 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[122],{"Operator":26,"Negate":26,"Nodes":123},[124],{"Operator":125,"Negate":26,"CPEMatch":126},"OR",[127],{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":128,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"BDF3EE76-6492-4194-9ABE-DDD6AE1CD8FA",[],[],{"lastModified":11,"cacheTime":132,"version":44},1792282959562,{"score":134,"band":135,"action":136,"scoredAt":137},46,"Medium","Plan remediation","2026-10-16T06:46:11.8672+00:00"]