Lucene search

K
hackeroneK3neH1:975749
HistorySep 06, 2020 - 2:56 p.m.

New Relic: IDOR - User is able to download charts/dashboards from cross accounts

2020-09-0614:56:26
k3ne
hackerone.com
61

@k3ne described an issue where a user on an account could access data concerning dashboards for another user on the same account. While this appeared to be a cross-account access issue, both users on the account have access to the same data by design.