地图 / OneAgent Unprivileged NTLM User Coercion

OneAgent Unprivileged NTLM User Coercion

访问控制 / Improper Privilege Management / #3313408

厂商: Dynatrace
严重程度: 低危
赏金: $750
弱点: Improper Privilege Management
研究员: @remiec
披露日期: 2025-10-15
资产: Dynatrace OneAgent
CVE: —

该报告还没有中文解读。

时间线

2025-08-25报告提交
2025-10-15公开披露

阅读 HackerOne 原文 ↗作者 @remiec · 版权归作者与 Dynatrace 所有

同类报告

Unauthenticated access to sensitive user informationRazer · — · $500 Re-Sharing allows increase of privilegesNextcloud · 2020-09-28 [h1-2102] [Plus] User with Store Management Permission can Make changeDomainEnforcementState - that should be limited to User Management OnlyShopify · 2022-04-21 Sub-Dept User Can Add User's To Main Department.Lark Technologies · 2022-10-18 [H1-2006 2020] Exploiting multiple vulnerabilities to get hacker's payment ensuredh1-ctf · 2020-06-18 No password confirmation required when using apptoken on sensitive endpointNextcloud · 2026-10-27