Simone Paganessi

A Cross-Site Request Forgery (CSRF) issue exists in the database snapshot creation feature. This allows a remote attacker to trick an authenticated administrator into visiting a specially crafted web page to trigger unauthorized database snapshot creation. Repeatedly triggering this operation can lead to resource exhaustion as snapshot files accumulate and consume available disk space, potentially resulting in degraded performance, system instability, and a Denial of Service (DoS) condition, where the system becomes unavailable to users.

A blind server-side request forgery (SSRF) occurs in the Database Server Test configuration. This allows an authenticated privileged attacker to enumerate exposed network services on adjacent network systems. SSRF is a flaw where an attacker can induce the server to make requests to an unintended location.

WatchGuard Dimension implements a client-side lock/unlock UI control to manage configuration changes. However, the server-side configuration endpoint fails to enforce this workflow state. This allows an authenticated administrator with read-write permissions to submit changes directly to the endpoint, bypassing the UI unlock requirement and potentially overwriting configuration changes made by another concurrent administrator session.

A server-side request forgery (SSRF) issue exists in the FTP Server Test configuration. This allows an authenticated privileged attacker to enumerate exposed network services on adjacent network systems. SSRF is a flaw that allows an attacker to induce the server-side application to make requests to an unintended location.

A stored cross-site scripting (XSS) issue exists in the task scheduling feature. This allows a low-privileged authenticated administrator to inject arbitrary HTML or JavaScript into specific fields, which subsequently executes within the browser session of any other user.

The web login endpoint does not enforce effective rate-limiting or account lockout by default. This allows a remote attacker to perform automated password guessing against user accounts. While an account lockout setting exists to block brute-force attempts after a defined number of failed attempts, it is not enabled by default.

A server-side request forgery (SSRF) issue exists in the Remote Backup Connection Test configuration. This allows an authenticated privileged attacker to enumerate exposed network services on adjacent network systems. SSRF is a flaw that allows an attacker to induce the server-side application to make requests to an unintended location.

An issue in the Backup Historical Data feature allows an authenticated administrator to execute arbitrary JavaScript in the browser of another user. This is a Cross-Site Scripting (XSS) flaw, which occurs when an application includes untrusted data in a web page without proper validation or escaping, enabling the execution of malicious scripts.

WatchGuard Dimension records unredacted session identifiers for logged-in users within its web UI diagnostic log. A low-privileged Dimension Administrator can retrieve this log to extract a Super Administrator's session token during an active session, which allows for account takeover.

A server-side request forgery (SSRF) issue exists in the Email Server Test configuration. This allows an authenticated privileged attacker to enumerate exposed network services on adjacent network systems. SSRF is a flaw that allows an attacker to induce the server-side application to make requests to an unintended location.

Improper neutralization of input during web page generation in the `spamBlocker` module allows for Stored Cross-site Scripting (XSS), a technique where malicious scripts are permanently stored on the target server.

Stored Cross-site Scripting (XSS), which occurs when an application includes untrusted data in a web page without proper validation or encoding, exists within the Tigerpaw Technology Integration module. This issue provides an additional unmitigated attack path for a related security flaw.

Stored Cross-site Scripting (XSS) exists in the ConnectWise Technology Integration module. This occurs due to improper neutralization of input during web page generation, allowing an attacker to inject malicious scripts that are stored on the server and later executed in the browser of other users.

Stored Cross-site Scripting (XSS) exists in the Autotask Technology Integration module. This occurs due to improper neutralization of input during web page generation, allowing an attacker to inject malicious scripts that are stored on the server and later executed in the browser of other users.

The SIP Proxy module contains a flaw involving improper neutralization of input during web page generation, which enables Stored Cross-site Scripting (XSS). XSS is a type of attack where malicious scripts are injected into trusted websites. This issue serves as an additional unmitigated attack path for another known flaw.

A Cross-Site Request Forgery (CSRF) issue in the Fireware OS WebUI allows a remote attacker to cause a denial-of-service (DoS) condition. This occurs when an authenticated administrator is tricked into visiting a malicious web page, which then triggers the condition in the WebUI. CSRF is a technique where an attacker forces a user's browser to perform an unwanted action on a different website where the user is currently authenticated.

A flaw exists in the Autotask Technology Integration module of WatchGuard Fireware OS that allows for Stored Cross-site Scripting (XSS). This issue is due to improper neutralization of input during web page generation.

A flaw exists in the Tigerpaw Technology Integration module of WatchGuard Fireware OS that allows for Stored Cross-site Scripting (XSS). This issue is due to improper neutralization of input during web page generation. Successful exploitation could allow an attacker to inject malicious scripts into web pages viewed by other users.

A flaw exists in the ConnectWise Technology Integration module of WatchGuard Fireware OS that allows for Stored Cross-site Scripting (XSS). This issue is due to improper neutralization of input during web page generation. Stored XSS occurs when a malicious script is stored on the target server and then executed by other users when they access the affected web page.

A flaw exists in the Gateway Wireless Controller module of WatchGuard Fireware OS that allows for Stored Cross-site Scripting (XSS). This issue is due to improper neutralization of input during web page generation. Successful exploitation could allow an attacker to inject malicious scripts into web pages viewed by other users.