Medium severity6.5CISA KEVNVD Advisory· Published Aug 14, 2020· Updated Aug 15, 2026

CVE-2019-5591

Description

A Default Configuration vulnerability in FortiOS may allow an unauthenticated attacker on the same subnet to intercept sensitive information by impersonating the LDAP server.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Fortinet/Fortios2 versions
cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*range: <=6.2.0
- (no CPE)
Fortinet/Fortinetcpe-rescue
Range: FortiOS 6.2.0 and below.

Patches

Vulnerability mechanics

References

www.fortiguard.com/psirt/FG-IR-19-037nvdMitigationVendor Advisory
www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.015
exploit	0.000
kev	0.120
patch	0.000
ransomware	0.060