CVE-2026-78174

Beskrivelse

WatchGuard Dimension records unredacted session identifiers for logged-in users in its web UI diagnostic log. A low-privileged Dimension Administrator can retrieve this log and extract a Super Administrator's session token while that administrator is logged in, enabling account takeover.

Beskrivelsen gjengis slik kilden har publisert den, på engelsk.

Svakhetstype

• CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

  The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

• CWE-269: Improper Privilege Management

  The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

• CWE-532: Insertion of Sensitive Information into Log File

  The product writes sensitive information to a log file.

Angrepsteknikker

Utledet gjennom svakhetstypen: CVE til CWE til CAPEC til ATT&CK. Dette viser hvilke teknikker svakhetsklassen historisk brukes til. Det er ikke en påstand om at nettopp denne sårbarheten er utnyttet slik.

• T1007: System Service Discovery discovery
• T1016: System Network Configuration Discovery discovery
• T1018: Remote System Discovery discovery
• T1033: System Owner/User Discovery discovery
• T1036.005: Match Legitimate Resource Name or Location stealth
• T1046: Network Service Discovery discovery
• T1049: System Network Connections Discovery discovery
• T1057: Process Discovery discovery
• T1069: Permission Groups Discovery discovery
• T1082: System Information Discovery discovery
• T1083: File and Directory Discovery discovery
• T1087: Account Discovery discovery
• T1111: Multi-Factor Authentication Interception credential-access
• T1120: Peripheral Device Discovery discovery
• T1124: System Time Discovery discovery
• T1134.001: Token Impersonation/Theft stealth, privilege-escalation
• T1135: Network Share Discovery discovery
• T1217: Browser Information Discovery discovery
• T1548: Abuse Elevation Control Mechanism privilege-escalation
• T1550.004: Web Session Cookie lateral-movement

Referanser

• https://psirt.watchguard.com/CVE-2026-78174