Fortinet FortiOS Default Configuration Vulnerability

Added Nov. 3, 2021 • Due May 3, 2022 • CVE-2019-5591

Overdue Fortinet / FortiOS CWE-306

Description

Fortinet FortiOS contains a default configuration vulnerability that may allow an unauthenticated attacker on the same subnet to intercept sensitive information by impersonating the Lightweight Directory Access Protocol (LDAP) server.

Required Action

Apply updates per vendor instructions.

References

https://nvd.nist.gov/vuln/detail/CVE-2019-5591

Additional Information

Catalog Version: 2025.01.24
Catalog Released: Jan. 24, 2025
Days Until Due: 0 days
Last Updated: 8 months, 1 week ago