An issue was discovered in Stormshield Network Security (SNS) 3.7.0 through 3.7.39, 3.11.0 through 3.11.27, 4.3.0 through 4.3.22, 4.6.0 through 4.6.9, and 4.7.0 through 4.7.1. It's possible to know if a specific user account exists on the SNS firewall by using remote access commands.
| Software | From | Fixed in |
|---|---|---|
| stormshield / stormshield_network_security | 4.7.0 | 4.7.2 |
| stormshield / stormshield_network_security | 4.6.0 | 4.6.10 |
| stormshield / stormshield_network_security | 4.3.0 | 4.3.23 |
| stormshield / stormshield_network_security | 3.11.0 | 3.11.27.x |
| stormshield / stormshield_network_security | 3.7.0 | 3.7.39.x |