onyx

onyx --cves cve-2019-5591

CVE-2019-5591

N/AKEVNUCLEI ↗Fortinet FortiOS
score
<0.1
cvss
—
epss
18.6%
published
—
kev added
2021-11-03
first seen

Fortinet FortiOS contains a default configuration vulnerability that may allow an unauthenticated attacker on the same subnet to intercept sensitive information by impersonating the Lightweight Directory Access Protocol (LDAP) server.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

events2021-11-03 — Added to CISA KEVK2026-10-21 (seen by) — Tracked by OnyxT2026-10-21 (seen by) — Nuclei template: FortiOS - Insecure LDAP Configuration DetectionNscore2026-10-21: score <0.1<0.1epss2026-09-22: epss 18.4%2026-09-23: epss 18.4%2026-09-24: epss 18.4%2026-09-25: epss 18.4%2026-09-26: epss 18.4%2026-09-27: epss 18.4%2026-09-28: epss 18.4%2026-09-29: epss 18.4%2026-09-30: epss 18.4%2026-10-01: epss 18.4%2026-10-02: epss 18.4%2026-10-03: epss 18.4%2026-10-04: epss 18.4%2026-10-05: epss 18.4%2026-10-06: epss 18.4%2026-10-07: epss 18.4%2026-10-08: epss 18.6%2026-10-09: epss 18.6%2026-10-10: epss 18.6%2026-10-11: epss 18.6%2026-10-12: epss 18.6%2026-10-13: epss 18.6%2026-10-14: epss 18.6%2026-10-15: epss 18.6%2026-10-16: epss 18.6%2026-10-18: epss 18.6%2026-10-19: epss 18.6%2026-10-20: epss 18.6%2026-10-21: epss 18.6%18.6%mentions/day0no mentions in 30 days2026-09-22today
  1. Added to CISA KEV
  2. Tracked by Onyx
  3. Nuclei template FortiOS - Insecure LDAP Configuration Detection

Nuclei template

A verified check exists — you can scan for this today, and so can everyone else.

template
FortiOS - Insecure LDAP Configuration Detection
severity
MED
first seen
nuclei -id CVE-2019-5591 -u https://target.example

Weaknesses

CWE-306

References 1