CVE-2019-5591
KEV RANSOMWAREMEDIUM 6.5EPSS 18.6%
A Default Configuration vulnerability in FortiOS may allow an unauthenticated attacker on the same subnet to intercept sensitive information by impersonating the LDAP server.
- Affected
- Fortinet · Fortinet FortiOS
- CVSS v3.1 NVD
- 6.5 MEDIUM
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - CVSS v2.0 NVD
- 3.3 LOW
AV:A/AC:L/Au:N/C:P/I:N/A:N - EPSS
- 18.57% chance of exploitation in the next 30 days, 97th percentile
- CISA KEV
- added 2021-11-03, used in ransomware campaigns
- Nuclei
- medium
- Published
- 2020-08-14
- Updated
- 2026-08-15
Proof-of-concept exploits (1)
- ayewo/fortios-ldap-mitm-poc-CVE-2019-55911★ · 2025-10-17