Eclipse Community Forums: BIRT » How to handle reporting of a security bug?

Home » Archived » BIRT » How to handle reporting of a security bug?(How to handle reporting of a security bug?)

How to handle reporting of a security bug? [message #652329]

Thu, 03 February 2011 10:36

Eclipse User

I am a security researcher with Security PS. I have found a vulnerability in this software package and would like to report it. I did find this post detailing the presence of a special security check box on the bug report submission form. I however did not see it when I went to fill in the bug report form. I am wondering if that check box only appears for committers?
My main question is what is the best way to disclose a security vulnerability to this project? As I want to do so in the most responsible way possible.

Thanks,
Jeff Beard-Shouse
Security Consultant, Security PS
jbeardshouse (a) securityps.com

[Updated on: Thu, 03 February 2011 10:38] by Moderator

Re: How to handle reporting of a security bug? [message #652397 is a reply to message #652329]

Thu, 03 February 2011 12:53

Eclipse User

Thanks Jeff. I sent you an email to discuss.

On 2/3/2011 10:36 AM, Jeff Beard-Shouse wrote:
> I am a security researcher with http://securityps.com I have found a
> vulnerability in this software package and would like to report it. I
> did find
> http://dev.eclipse.org/mhonarc/lists/eclipse.org-committers/ msg00511.html post
> detailing the presence of a of a special security check box on the bug
> report submission form. I however did not see it when I went to fill in
> the bug report form. I am wondering if that check box only appears for
> committers?
> My main question is what is the best way to disclose a security
> vulnerability to this project? As I want to do so in the most
> responsible way possible.
>
> Thanks,
> Jeff Beard-Shouse
> Security Consultant, Security PS
> mailto:jbeardshouse@securityps.com

Previous Topic:	Problem with export to pdf
Next Topic:	How to transform data for use in a pie chart

Goto Forum:

-=] Back to Top [=-

Current Time: Sat Jul 26 17:27:03 EDT 2025

.:: Contact :: Home ::.

Breadcrumbs

Sign up to our Newsletter