CVE-2019-5591

Description

A Default Configuration vulnerability in FortiOS may allow an unauthenticated attacker on the same subnet to intercept sensitive information by impersonating the LDAP server.

Reserved 2019-01-07 | Published 2020-08-14 | Updated 2025-07-30 | Assigner fortinet

CISA Known Exploited Vulnerability

Date added 2021-11-03 | Due date 2022-05-03

Apply updates per vendor instructions.

Problem types

Information disclosure

Product status

FortiOS 6.2.0 and below.
affected

References

www.fortiguard.com/psirt/FG-IR-19-037

cve.org (CVE-2019-5591)

nvd.nist.gov (CVE-2019-5591)

Download JSON