Forum Discussion

rsinayev's avatar
rsinayev
Contributor
10 years ago

Contact information to report vulnerabilities.

We recently discovered an issue with Lithium platform. We have not been able to reach anyone at the contact numbers provided.  No response from the contact form either. 

 

Can someone please provide contact information for the security team ASAP?

 

Thanks

  • OlivierS's avatar
    OlivierS
    10 years ago

    rsinayev you can report security incident as below (taken from www.lithium.com/security page)

     

    Reporting Security Issues

    To report security issues or problems with any Lithium product or service or website, please follow these simple rules:

    • If you are conducting security testing, please follow our Security Testing Policy above.
    • Report all issues privately and securely to the Lithium Security team by sending an email to security [at] lithium [dot] com and sign and encrypt your email using SMIME certificates or PGP encryption.
    • To exchange SMIME certificates or PGP encryption key credentials please send a signed email message to security [at] lithium [dot] com.
    • If you don’t have access to SMIME or PGP, please send an email to security [at] lithium [dot] com to make alternate arrangements.
    • Provide full details of the issue and any details to replicate the problem.
    • Provide your contact information so the Lithium Security team could contact you for clarifications or details.
  • OlivierS's avatar
    OlivierS
    Lithium Alumni (Retired)
    10 years ago

    rsinayev you can report security incident as below (taken from www.lithium.com/security page)

     

    Reporting Security Issues

    To report security issues or problems with any Lithium product or service or website, please follow these simple rules:

    • If you are conducting security testing, please follow our Security Testing Policy above.
    • Report all issues privately and securely to the Lithium Security team by sending an email to security [at] lithium [dot] com and sign and encrypt your email using SMIME certificates or PGP encryption.
    • To exchange SMIME certificates or PGP encryption key credentials please send a signed email message to security [at] lithium [dot] com.
    • If you don’t have access to SMIME or PGP, please send an email to security [at] lithium [dot] com to make alternate arrangements.
    • Provide full details of the issue and any details to replicate the problem.
    • Provide your contact information so the Lithium Security team could contact you for clarifications or details.