Dimension Business Logic Flaw Allows Chained Backend Object Operations

Summary #

A business logic flaw in WatchGuard Dimension allows an authenticated administrator to trigger multiple backend operations within a single logical flow by sending a specially crafted request.

Impact: This issue could allow unauthorized execution of multiple backend operations, potentially leading to state manipulation, privilege abuse, or bypass of intended workflow restrictions. The vulnerability stems from improper validation and isolation of user-controlled object data across requests.