Stored XSS in WatchGuard Dimension Trusted CA Certificate Configuration

Executive Summary

This is a Stored Cross-Site Scripting (XSS) vulnerability in WatchGuard Dimension's Trusted CA certificate configuration. An authenticated administrator can exploit it by saving a specially crafted certificate to execute arbitrary JavaScript in another administrator's browser session.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, check if your WatchGuard Dimension version is 2.0 or higher but below 2.3.1. Log in to the admin interface and navigate to the Trusted CA certificate configuration section. Look for any suspicious or malformed certificate names or content that may contain JavaScript code.

Useful 0 Not Useful 0

Impact Analysis

An attacker could read same-origin administrative pages, issue authenticated requests as the victim administrator, or chain with other administrative actions. This requires either a malicious administrator targeting another or tricking an admin into importing a malicious certificate.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could potentially impact compliance with GDPR and HIPAA by enabling unauthorized access to administrative pages and authenticated requests. An attacker exploiting this XSS flaw might exfiltrate sensitive data or perform actions on behalf of an administrator, which could violate data protection requirements under these regulations.

Useful 0 Not Useful 0

Mitigation Strategies

Upgrade WatchGuard Dimension to version 2.3.1 or later immediately. If upgrading is not possible, restrict administrative access to trusted users only and monitor for unusual activity in the admin interface.

Useful 0 Not Useful 0