Responsible Disclosure
Vulnerabilities in Atos / Eviden IT systems, and/or sensitive data breach should be directly reported to the Atos SOC.
The Eviden BDS PSIRT will handle reports regarding vulnerabilities potentially affecting BDS products according to its Vulnerability Handling Policy.
Information to provide
To ease analysis and understanding of a vulnerability report, please make sure to provide the necessary information in your report.
** Affected Product **
Make sure you provide the complete name of the product, and not only a brand such as BullSequana or Trustway.
** Vulnerability Summary **
Please summarize the identified vulnerability.
** Firmware / Software version **
If relevant, please provide the firmware / software version of the vulnerable product.
** Method / Protocol / URL used to access **
Describe the step-by-step procedure which can be used to evidence the vulnerability.
** Authenticated / unauthenticated status **
Don't forget to describe the prerequisites of the procedure, especially the authentication status.
** Expected / Unexpected behavior **
Describe what you expected as a behavior, or what unexpected behavior you observed revealing the vulnerability.
** Contact **
Optionally, please provide contact information (Full Name, Phone number, etc.).
Your personal data will be processed according to Eviden's Privacy Policy for the sole purpose of Product Security Incident Response.
Encryption
Should you want to encrypt your message, please use the following PGP key.
-----BEGIN PGP PUBLIC KEY BLOCK-----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=zhcq
-----END PGP PUBLIC KEY BLOCK-----
