CVE-2019-5591 is a default configuration vulnerability in Fortinet FortiOS that allows an unauthenticated attacker on the same subnet to intercept sensitive information by impersonating an LDAP server. With a CVSS score of 6.5 (MEDIUM), this vulnerability has a low attack complexity and high confidentiality impact, requiring only network access. It is actively exploited in the wild, with its presence in CISA's KEV catalog and high EPSS and FAUCET Risk Scores indicating significant real-world risk. While no public Metasploit or ExploitDB modules exist, Nuclei templates are available, and it has garnered extensive community discussion and media coverage, including warnings from the FBI and CISA regarding APT group exploitation.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 6.2.0CPE matchmatch criteria | cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.