{"id":11667,"date":"2021-05-25T15:15:43","date_gmt":"2021-05-25T13:15:43","guid":{"rendered":"https:\/\/usd.formwandler.rocks\/meldung-bug-oder-schwachstelle\/"},"modified":"2022-04-13T16:34:22","modified_gmt":"2022-04-13T14:34:22","slug":"report-a-vulnerability-or-bug","status":"publish","type":"page","link":"https:\/\/www.usd.de\/en\/report-a-vulnerability-or-bug\/","title":{"rendered":"Report a vulnerability or bug"},"content":{"rendered":"

[et_pb_section fb_built=\"1\" _builder_version=\"4.16\" _module_preset=\"default\" custom_padding=\"0px||0px||true|false\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_row _builder_version=\"4.16\" _module_preset=\"default\" width=\"100%\" custom_padding=\"0px||||false|false\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_column type=\"4_4\" _builder_version=\"4.16\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_text _builder_version=\"4.16\" _module_preset=\"default\" text_text_color=\"#FFFFFF\" text_font_size=\"30px\" text_line_height=\"1.2em\" header_font=\"Roboto||||||||\" header_text_color=\"#F07F1D\" header_font_size=\"50px\" background_image=\"https:\/\/www.usd.de\/wp-content\/uploads\/usd-header-schwachstellenmeldung.jpg\" custom_margin=\"-31px||0px||false|false\" custom_padding=\"166px|39px|62px|39px|false|true\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"]<\/p>\n

Report a usd
vulnerability or bug<\/h1>\n

[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=\"4.16\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_column type=\"4_4\" _builder_version=\"4.16\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_text _builder_version=\"4.16\" _module_preset=\"default\" background_color=\"RGBA(0,0,0,0)\" custom_margin=\"|0px|24px|0px|false|true\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"]<\/p>\n

We make every effort to ensure the security of our websites, platforms and IT infrastructure components. Nevertheless, it may happen that you discover a weakness or bug in our systems. In this case we ask that you handle the vulnerability responsibly and report it to us for correction. For this purpose we have implemented a dedicated process below.<\/span><\/p>\n

Disclosure guideline<\/h2>\n

We aim to fix reported vulnerabilities or bugs within 60 days. If the vulnerability is found in a third-party component, we will contact the responsible parties to arrange for its remediation. The following rules apply for reporting vulnerabilities and bugs:<\/span><\/p>\n

[\/et_pb_text][et_pb_text _builder_version=\"4.16\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"]<\/p>\n\n\n\n
<\/i><\/td>\nWe do not pay premiums for reported vulnerabilities.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

[\/et_pb_text][et_pb_text _builder_version=\"4.16\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"]<\/p>\n\n\n\n
<\/i><\/td>\nVulnerabilities may only be published in agreement with usd AG.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

[\/et_pb_text][et_pb_text _builder_version=\"4.16\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"]<\/p>\n\n\n\n
<\/i><\/td>\nDo not violate applicable law and do not damage or compromise any data of usd and\/or its customers or exploit any confirmed vulnerabilities.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

[\/et_pb_text][et_pb_text _builder_version=\"4.16\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"]<\/p>\n\n\n\n
<\/i><\/td>\nIn vulnerability reports, including any attachments, do not include information that could identify an individual (e.g., name, contact information)<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

[\/et_pb_text][et_pb_text _builder_version=\"4.16\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"]<\/p>\n\n\n\n
<\/i><\/td>\nTo help us process vulnerability reports as quickly as possible, please ensure that you explain the steps required to reproduce the vulnerability in detail.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=\"4.16\" _module_preset=\"default\" custom_padding=\"||7px|||\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_column type=\"4_4\" _builder_version=\"4.16\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_text _builder_version=\"4.16\" _module_preset=\"default\" background_color=\"RGBA(0,0,0,0)\" custom_margin=\"0px|0px|17px|0px|false|true\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"]<\/p>\n

Legal & Conditions<\/span><\/h2>\n

By submitting vulnerabilities and\/or proposed solutions (hereinafter referred to as \u201cfeedback\u201d) to usd AG<\/p>\n

[\/et_pb_text][et_pb_text _builder_version=\"4.16\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"]<\/p>\n\n\n\n
<\/i><\/td>\nyou agree to avoid causing any damage to usd AG and\/or its customers and therefore agree not to disclose any information until a fix and\/or patch has been provided by usd; and<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

[\/et_pb_text][et_pb_text _builder_version=\"4.16\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"]<\/p>\n\n\n\n
<\/span><\/td>\nyou agree that usd AG may use this feedback to update and\/or improve its websites, platforms and IT infrastructure components; and<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

[\/et_pb_text][et_pb_text _builder_version=\"4.16\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"]<\/p>\n\n\n\n
<\/i><\/td>\nyou grant usd AG the right to use your feedback for any purpose without restriction or compensation of any kind with respect to you and\/or your representatives.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

[\/et_pb_text][et_pb_text _builder_version=\"4.16\" _module_preset=\"default\" background_color=\"RGBA(0,0,0,0)\" custom_margin=\"76px|0px|3px|0px|false|true\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"]<\/p>\n

Have you discovered a vulnerability or bug?<\/h2>\n

Please inform us according to the guidelines specified above.\u00a0Please use our registration form or contact us directly at<\/span>\u00a0<\/span>incident-response-team@usd.de<\/span><\/a>. For encrypted communication via email, we can offer either\u00a0<\/span>S\/MIME<\/a>\u00a0or\u00a0<\/span>PGP<\/a>. For exchanging data via email, we need your certificate or your public PGP key.<\/span><\/p>\n

[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=\"4.16\" _module_preset=\"default\" custom_margin=\"2px|auto||auto||\" custom_padding=\"||59px|||\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_column type=\"4_4\" _builder_version=\"4.16\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_code module_id=\"Formular-grau\" module_class=\"Formular-grau\" _builder_version=\"4.16\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"]\n

\n

<\/p>

    <\/ul><\/div>\n
    \n
    \n<\/fieldset>\n

    Enter a short note or description that helps to identify the vulnerability or bug.\n<\/p>\n

    <\/span>\n<\/p>\n

    Enter the components which are affected by the vulnerability or bug.\n<\/p>\n