Dimension Blind SSRF via Database Test Connection Feature

Summary #

A blind server-side request forgery (SSRF) vulnerability WatchGuard Dimension Database Server Test configuration allows an authenticated privileged attacker to enumerate exposed network services on adjacent network systems.

Impact: An authenticated administrator can abuse the database connection test feature to probe internal network hosts and infer reachability based on response timing, enabling internal network mapping, discovery of reachable internal services and IP ranges, and enumeration of internal infrastructure that would otherwise not be accessible to the attacker.