CyberRota Analysis
AI-GeneratedWatchGuard Dimension is vulnerable due to the unredacted logging of session identifiers for logged-in users in its web UI diagnostic log, allowing low-privileged administrators to access sensitive session tokens. This critical flaw can lead to account takeover of Super Administrators, posing significant risks to system integrity and security. Organizations using WatchGuard Dimension should prioritize immediate remediation to mitigate potential exploitation.
Original NVD Description
WatchGuard Dimension records unredacted session identifiers for logged-in users in its web UI diagnostic log. A low-privileged Dimension Administrator can retrieve this log and extract a Super Administrator's session token while that administrator is logged in, enabling account takeover.