CVSS 3.1
6.5 mediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NCVE-2019-5591
A Default Configuration vulnerability in FortiOS may allow an unauthenticated attacker on the same subnet to intercept sensitive information by impersonating the LDAP server.
Severity
- EPSS
- 19% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
- CISA KEV
- listed 2021-11-03, due 2022-05-03, known ransomware use
- CWE
- CWE-306
- Published
- Modified
- Record from
- the NVD, synced
Affected
- fortinet:fortios