CVE-2019-5591

MEDIUMCISA KEV

6.5

Description

A Default Configuration vulnerability in FortiOS may allow an unauthenticated attacker on the same subnet to intercept sensitive information by impersonating the LDAP server.

CVE Details

CVSS v3.1 Score6.5

SeverityMEDIUM

CVSS VectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack VectorADJACENT_NETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published8/14/2020

Last Modified10/24/2025

Sourcekev

Honeypot Sightings0

CISA KEV

VendorFortinet

ProductFortiOS

Vulnerability NameFortinet FortiOS Default Configuration Vulnerability

KEV Date Added2021-11-03

Remediation Due Date2022-05-03

Ransomware UseUnknown

Affected Products

fortinet:fortios

Weaknesses (CWE)

CWE-306CWE-306

References

https://www.fortiguard.com/psirt/FG-IR-19-037(psirt@fortinet.com)

https://www.fortiguard.com/psirt/FG-IR-19-037(af854a3a-2127-422b-91ae-364da2661108)

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-5591(134c704f-9b21-4f2e-91b3-4a467353bcc0)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.