CVE-2026-78618 : 詳細

CVE-2026-78618

2026-08-28
02h16 +00:00
A01-Broken Access ControlA04-Insecure Design
2026-08-28
20h19 +00:00
特定のCVEの通知
特定のCVEの変更情報をいち早くお届けします。
通知を管理する

CVE の説明

A business logic flaw in WatchGuard Dimension allows an authenticated administrator to trigger multiple backend operations within a single logical flow by sending a specially crafted request.

CVE の情報

関連する弱点

CWE-ID 弱点名 出典
CWE-284 Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
CWE-841 Improper Enforcement of Behavioral Workflow
The product supports a session in which more than one behavior must be performed by an actor, but it does not properly ensure that the actor performs the behaviors in the required sequence or timeframe.

参考資料