Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2021/03/15 10:17 p.m.16 views

New Relic: Missing Authorization check on View permissions for Alerting Conditions via /internal_api/1/accounts/XXXXXXX/policies/YYYYYYY/conditions?offs endpoint

@archangel reported that an elevation-of-privilege due to a missing authorization check on View permissions for Alerting Conditions could have allowed a user to see alerting policies without having the rights to do so...

6.8AI score
SaveExploits0
Rows per page
Query Builder