Hillstone Networks Next Generation Firewall Sensitive Information Disclosure Vulnerability

A vulnerability in Hillstone Networks Next Generation Firewall, specifically in versions 5.5R8P1 prior to 5.5R8P23, allows for the generation of error messages that inadvertently disclose sensitive information. This information leakage includes absolute path details, which could provide malicious actors with insights into the server's internal structure, potentially leading to further security risks.

Impact

Exploitation of this vulnerability could result in unauthorized disclosure of sensitive information, specifically absolute path details, which may be used to infer the server's internal structure and facilitate further attacks.

Remediation

Users can upgrade to Hillstone Next Generation Firewall version 5.5R8P23 to address this vulnerability.