CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2020-08-14
Fortinet FortiOS LDAP Server Impersonation Information Disclosure (CVE-2019-5591) Technical Advisory
[Affected Scope] FortiOS versions 6.2.0 and below, and 6.0.x branch prior to patched releases
[Impact] An unauthenticated attacker on the same subnet can intercept sensitive credentials by impersonating the legitimate LDAP server
[Mitigation] Upgrade FortiOS to the latest patched release or enforce LDAPS with strict certificate validation