CVE-2019-5591

MEDIUMCISA KEV

6.5

Descripcion

A Default Configuration vulnerability in FortiOS may allow an unauthenticated attacker on the same subnet to intercept sensitive information by impersonating the LDAP server.

Detalles CVE

Puntuacion CVSS v3.16.5

SeveridadMEDIUM

Vector CVSSCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Vector de ataqueADJACENT_NETWORK

ComplejidadLOW

Privilegios requeridosNONE

Interaccion usuarioNONE

Publicado8/14/2020

Ultima modificacion10/24/2025

Fuentekev

Avistamientos honeypot0

CISA KEV

VendedorFortinet

ProductoFortiOS

Nombre vulnerabilidadFortinet FortiOS Default Configuration Vulnerability

Fecha inclusion KEV2021-11-03

Fecha limite remediacion2022-05-03

Uso en ransomwareUnknown

Productos afectados

fortinet:fortios

Debilidades (CWE)

CWE-306CWE-306

Referencias

https://www.fortiguard.com/psirt/FG-IR-19-037(psirt@fortinet.com)

https://www.fortiguard.com/psirt/FG-IR-19-037(af854a3a-2127-422b-91ae-364da2661108)

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-5591(134c704f-9b21-4f2e-91b3-4a467353bcc0)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.