Eclipse Community Forums: BIRT » How to handle reporting of a security bug?

Help

Home

Home » Archived » BIRT » How to handle reporting of a security bug?(How to handle reporting of a security bug?)

Show: Today's Messages :: Show Polls :: Message Navigator

How to handle reporting of a security bug? [message #652329]

Thu, 03 February 2011 15:36

Jeff Beard-Shouse

Messages: 1
Registered: February 2011

Junior Member

I am a security researcher with Security PS. I have found a vulnerability in this software package and would like to report it. I did find this post detailing the presence of a special security check box on the bug report submission form. I however did not see it when I went to fill in the bug report form. I am wondering if that check box only appears for committers?
My main question is what is the best way to disclose a security vulnerability to this project? As I want to do so in the most responsible way possible.

Thanks,
Jeff Beard-Shouse
Security Consultant, Security PS
jbeardshouse (a) securityps.com

[Updated on: Thu, 03 February 2011 15:38]

Report message to a moderator

Re: How to handle reporting of a security bug? [message #652397 is a reply to message #652329]

Thu, 03 February 2011 17:53

Jason Weathersby

Messages: 9167
Registered: July 2009

Senior Member

Thanks Jeff. I sent you an email to discuss.

On 2/3/2011 10:36 AM, Jeff Beard-Shouse wrote:
> I am a security researcher with http://securityps.com I have found a
> vulnerability in this software package and would like to report it. I
> did find
> http://dev.eclipse.org/mhonarc/lists/eclipse.org-committers/ msg00511.html post
> detailing the presence of a of a special security check box on the bug
> report submission form. I however did not see it when I went to fill in
> the bug report form. I am wondering if that check box only appears for
> committers?
> My main question is what is the best way to disclose a security
> vulnerability to this project? As I want to do so in the most
> responsible way possible.
>
> Thanks,
> Jeff Beard-Shouse
> Security Consultant, Security PS
> mailto:jbeardshouse@securityps.com

Report message to a moderator

Previous Topic:	Problem with export to pdf
Next Topic:	How to transform data for use in a pie chart

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Fri Apr 19 01:08:52 GMT 2024

.:: Contact :: Home ::.

Breadcrumbs

Sign up to our Newsletter