Actively exploited in the wild
Fortinet FortiOS Default Configuration Vulnerability
Fortinet - FortiOS · Listed in the CISA KEV since 2021-11-03. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions.
CVE-2019-5591
MediumCVSS 6.5KEVExploitation Probability (EPSS)
Very high risk97th percentile - higher than 97% of all known CVEs
Summary
A Default Configuration vulnerability in FortiOS may allow an unauthenticated attacker on the same subnet to intercept sensitive information by impersonating the LDAP server.
Risk Assessment
An attacker can intercept credentials or other sensitive information sent to the LDAP server.
Recommendation
Change the default configuration of FortiOS to enforce secure connections to the LDAP server.
Original NVD description (English source)
A Default Configuration vulnerability in FortiOS may allow an unauthenticated attacker on the same subnet to intercept sensitive information by impersonating the LDAP server.