PT-2026-82843 · Watchguard · Dimension
CVSS v4.0
5.1
Medium
| Vector | AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
WatchGuard Dimension (affected versions not specified)
Description
WatchGuard Dimension implements a client-side lock/unlock UI control to manage configuration changes. However, the server-side configuration endpoint fails to enforce this workflow state. This allows an authenticated administrator with read-write permissions to submit changes directly to the endpoint, bypassing the UI unlock requirement and potentially overwriting configuration changes made by another concurrent administrator session.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Dimension