Using App Ads Helper as an Analytic User

Joshua Regio
Dec 9, 2017 · 1 min read

Description: Analytic Users are only given access to an app’s insight. In the App Ads Helper, you can check the app platform setting, mobile app install ads bid type information and a developer tools to test if a certain function of the app is working.

Proof of Concept:
Go to “https://developers.facebook.com/tools/app-ads-helper/" and select your app with an Analytic User role.

In the Ads App Helper you could:
- Check the App platform setting
- Check whether an Ad Account is eligible for bidding CPA
- Use the App Event Tester & Deep Link Tester

Impact: An analytic user can see information that shouldn’t be available to them. They could also use tools which would allow them to test certain functions of the app.

Timeline:
Sept. 1 2017 — Initial Report
Sept. 9 2017 — Report Triaged
Nov. 2 2017 — Advance Bounty of $500
Nov. 3 2017 — Bug Fixed

Welcome to a place where words matter. On Medium, smart voices and original ideas take center stage - with no ads in sight. Watch
Follow all the topics you care about, and we’ll deliver the best stories for you to your homepage and inbox. Explore
Get unlimited access to the best stories on Medium — and support writers while you’re at it. Just $5/month. Upgrade

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store