Unrated severityCISA KEVNVD Advisory· Published Aug 14, 2020· Updated Oct 21, 2025

CVE-2019-5591

Description

A Default Configuration vulnerability in FortiOS may allow an unauthenticated attacker on the same subnet to intercept sensitive information by impersonating the LDAP server.

Affected products

Fortinet/Fortiosllm-fuzzy
Fortinet/Fortinetcpe-rescue
Range: FortiOS 6.2.0 and below.

Patches

Vulnerability mechanics

References

www.fortiguard.com/psirt/FG-IR-19-037mitrex_refsource_CONFIRM

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.015
exploit	0.000
kev	0.120
patch	0.000
ransomware	0.000