Security information: Difference between revisions

Security information (view source)

No change in size , 10 months ago

m

31,003

edits

@@ Line 148: / Line 148: @@
 =[[File:art.png]] Bug Bounty and VDP Campaigns=
-Bug bounty campaigns are regularly conducted by the project and funded by the Dolibarr Association. These campaigns are private VDP (Vulnerability Disclosure Programs) managed by specialized partners (Examples: https://yogosha.com, https://huntr.com/). Fixes from these campaigns are published within 15 days, as with any other public vulnerability report (this is the timeframe observed by the community project; contact a Dolibarr Preferred Partner if you require a longer contractual timeframe).
+Bug bounty campaigns are regularly conducted by the project and funded by the Dolibarr Association. These campaigns are private VDP (Vulnerability Disclosure Programs) managed by specialized partners (Examples: https://yogosha.com, https://huntr.com/).
+Fixes from these campaigns are published within 15 days, as with any other public vulnerability report (this is the timeframe observed by the community project; contact a Dolibarr Preferred Partner if you require a longer contractual timeframe).
 ----
 <sup>(*X)</sup> This solution is part of protection used to solve vulnerabilities classified by the [http://www.owasp.org/index.php/Top_10_2007 OWASP Top Ten 2007] at range number X. Value for position X may have been changed since.