[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fcPCXO7cVOwzAnqzeH97cdn_iG9K_HtaPRo4tuW6y378":3,"g5a-risk:CVE-2019-10198":139},{"success":4,"data":5,"meta":137},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":47,"epssPercentile":27,"epssTimeSeries":48,"severity":49,"affectedProducts":50,"affectedProductsCount":61,"references":62,"referencesCount":77,"weaknesses":78,"weaknessesCount":61,"isActivelyExploited":93,"cisaInfo":27,"otxData":27,"relatedBlogPosts":94,"seoMetadata":95,"configurations":120,"relatedVendorCves":135,"notableEvents":136},"CVE-2019-10198","What is CVE-2019-10198?","An authentication bypass vulnerability was discovered in foreman-tasks before 0.15.7. Previously, commit tasks were searched through find_resource, which performed authorization checks. After the change to Foreman, an unauthenticated user can view the details of a task through the web UI or API, if they can discover or guess the UUID of the task.","An authentication bypass vulnerability was discovered in foreman-tasks before 0.15.7. Previously, commit tasks were searched through find_resource, which per...","2019-07-31T22:15:12.59","2020-09-30T18:16:14.837",6.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":30,"CVSSMetricV2":37,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","MEDIUM",null,2.8,3.6,[31],{"Source":32,"Type":33,"CVSSData":34,"ExploitabilityScore":28,"ImpactScore":29},"secalert@redhat.com","Secondary",{"Version":35,"VectorString":36,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.0","CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[38],{"Source":17,"Type":18,"CVSSData":39,"BaseSeverity":26,"ExploitabilityScore":45,"ImpactScore":46,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":40,"VectorString":41,"AccessVector":21,"AccessComplexity":22,"Authentication":42,"ConfidentialityImpact":43,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":44,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:N\u002FA:N","SINGLE","PARTIAL",4,8,2.9,0.01599,[47,47,47,47,47,47,47],"Medium",[51,56],{"vendor":52,"product":53,"version":54,"criteria":55,"vulnerable":4},"theforeman","foreman-tasks","*","cpe:2.3:a:theforeman:foreman-tasks:*:*:*:*:*:*:*:*",{"vendor":57,"product":58,"version":59,"criteria":60,"vulnerable":4},"redhat","satellite","6.6","cpe:2.3:a:redhat:satellite:6.6:*:*:*:*:*:*:*",2,[63,68,73],{"url":64,"source":65,"tags":66},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2019:3172","Red Hat",[67],"Third Party Advisory",{"url":69,"source":65,"tags":70},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=CVE-2019-10198",[71,72,67],"Issue Tracking","Patch",{"url":74,"source":75,"tags":76},"https:\u002F\u002Fprojects.theforeman.org\u002Fissues\u002F27275","Theforeman",[67],3,[79,87],{"id":80,"name":81,"description":82,"extendedDescription":83,"status":84,"abstraction":85,"structure":86},"CWE-306","Missing Authentication for Critical Function","The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.","","Draft","Base","Simple",{"id":88,"name":89,"description":90,"extendedDescription":83,"status":91,"abstraction":92,"structure":86},"CWE-592","DEPRECATED: Authentication Bypass Issues","This weakness has been deprecated because it covered redundant concepts already described in CWE-287.","Deprecated","Class",false,[],{"title":96,"metaDescription":97,"keywords":98,"canonicalUrl":99,"structuredData":100},"What is CVE-2019-10198? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-10198, a medium severity cyber security vulnerability from 2019. An authentication bypass vulnerability was discovered in ...","CVE-2019-10198, CVE-2019-10198 vulnerability, CVE-2019-10198 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, theforeman security, redhat security, foreman-tasks vulnerability, satellite vulnerability","\u002Fwhat-is\u002Fcve-2019-10198",{"@context":101,"@type":102,"headline":96,"description":97,"datePublished":10,"dateModified":11,"author":103,"publisher":107,"about":111,"mainEntityOfPage":115,"articleSection":118,"keywords":119},"https:\u002F\u002Fschema.org","TechArticle",{"@type":104,"name":105,"url":106},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":104,"name":105,"url":106,"logo":108},{"@type":109,"url":110},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":112,"name":6,"description":113,"additionalType":114},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":116,"@id":117},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-10198","Cybersecurity","CVE-2019-10198, CVE-2019-10198 vulnerability, CVE-2019-10198 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[121,129],{"Operator":27,"Negate":27,"Nodes":122},[123],{"Operator":124,"Negate":27,"CPEMatch":125},"OR",[126],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":127,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":128,"VersionEndIncluding":27},"3A5DBECF-0B51-4217-B8E1-334294DD7A8B","0.15.7",{"Operator":27,"Negate":27,"Nodes":130},[131],{"Operator":124,"Negate":27,"CPEMatch":132},[133],{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":134,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"958FBCAC-9A30-418A-AD50-1D155D6C7D85",[],[],{"lastModified":11,"cacheTime":138,"version":40},1792372355198,{"score":140,"band":141,"action":142,"scoredAt":143},31,"Low","Monitor","2026-10-16T06:46:36.152617+00:00"]