CVE-2019-5591
Published 2020-08-14 · Updated 2026-08-15 · Source psirt@fortinet.com
Summary
CVE-2019-5591 is a medium-severity (CVSS 6.5) vulnerability in Fortinet FortiOS. CISA added it to the Known Exploited Vulnerabilities catalog on November 3, 2021, which means exploitation in the wild has been confirmed; US federal agencies had to remediate it by May 3, 2022. CISA also lists it as known to be used in ransomware campaigns, so it should be prioritised accordingly. Fortinet has 32 vulnerabilities in the KEV catalog, 14 of them linked to ransomware.
All 32 known-exploited Fortinet vulnerabilities →Description
A Default Configuration vulnerability in FortiOS may allow an unauthenticated attacker on the same subnet to intercept sensitive information by impersonating the LDAP server.
CVSS vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CISA Known-Exploited Vulnerability
Product: Fortinet — FortiOS
Name: Fortinet FortiOS Default Configuration Vulnerability
Date added: 2021-11-03 · Due: 2022-05-03
Required action: Apply updates per vendor instructions.