Dimension Stored XSS via Trusted CA Certificate Configuration

Summary #

A Stored Cross-Site Scripting (XSS) vulnerability in WatchGuard Dimension's Trusted CA certificate configuration allows an authenticated administrator to execute arbitrary JavaScript in another authenticated administrator's web browser by saving a carefully crafted certificate.

Impact: An attacker who can get an administrator to import a malicious CA certificate, or a malicious administrator targeting another administrator, can execute arbitrary JavaScript in the Dimension Web UI origin. This can be used to read same-origin administrative pages, issue authenticated requests as the victim administrator, and chain with other state-changing administrative actions.