Responsible Disclosure

The Eviden BDS PSIRT will handle all reports regarding vulnerabilities potentially affecting BDS products with high priority. Security related topics out of the PSIRT scope may be redirected to the relevant teams on a case-by-case basis. Any request related to product support and other unrelated topics will be silently ignored.

Vulnerabilities in Atos / Eviden IT systems, and/or sensitive data breach should be directly reported to the Atos SOC.

The Eviden BDS PSIRT will handle reports regarding vulnerabilities potentially affecting BDS products according to its Vulnerability Handling Policy.

Information to provide

To ease analysis and understanding of a vulnerability report, please make sure to provide the necessary information in your report.

Affected Product

Make sure you provide the complete name of the product, and not only a brand such as BullSequana or Trustway.

Vulnerability Summary

Please summarize the identified vulnerability.

Firmware / Software version

If relevant, please provide the firmware / software version of the vulnerable product.

Method / Protocol / URL used to access

Describe the step-by-step procedure which can be used to evidence the vulnerability.

Authenticated / unauthenticated status

Don't forget to describe the prerequisites of the procedure, especially the authentication status.

Expected / Unexpected behavior

Describe what you expected as a behavior, or what unexpected behavior you observed revealing the vulnerability.

Contact

Optionally, please provide contact information (Full Name, Phone number, etc.).

Your personal data will be processed according to Eviden's Privacy Policy for the sole purpose of Product Security Incident Response.

Encryption

Should you want to encrypt your message, please use the following PGP key.

Responsible Disclosure

Information to provide

** Affected Product **

** Vulnerability Summary **

** Firmware / Software version **

** Method / Protocol / URL used to access **

** Authenticated / unauthenticated status **

** Expected / Unexpected behavior **

** Contact **