LinkedIn · Report #1791720
Ad Account Takeover
Validstatus
criticalseverity
30upvotes
20 Jul 2023disclosed
Summary
The researcher found an authorization issue in LinkedIn Marketing Solutions - Business Manager, which allowed an attacker to bind an unrelated Campaign Manager Account via the attacker's Business Manager. This could have led to unauthorized access to the target's LinkedIn Campaign Manager. We addressed and resolved the issue within 24 hours.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.