Dimension Server-Side Request Forgery via Remote Backup Connection Test

Summary #

A server-side request forgery (SSRF) vulnerability WatchGuard Dimension Remote Backup Connection Test configuration allows an authenticated privileged attacker to enumerate exposed network services on adjacent network systems.

Impact: An authenticated attacker can leverage the remote backup connection test to perform internal network reconnaissance and port scanning from the Dimension server's network vantage point, mapping hosts and services that are otherwise inaccessible externally. This information can be used to identify internal management interfaces or vulnerable services and to plan further lateral movement or targeted exploitation within the internal network.