Vulnerability Disclosure | FPT Smart Cloud
Report a security or privacy vulnerability
If you believe you have discovered a security or privacy vulnerability in an FPT Smart Cloud product, please report it to us.
I. How to report a security or privacy vulnerability
If you believe you have discovered a security or privacy vulnerability that affects FPT Smart Cloud products, software, services, or web servers, please report it to us. We welcome reports from everyone, including security researchers, developers, and customers.
To report a security or privacy vulnerability, please send an email to security_report@fpt.com that includes:
• The specific product and software version(s) which you believe are affected
• A description of the behavior you observed as well as the behavior that you expected
• A numbered list of steps required to reproduce the issue and a video demonstration, if the steps may be hard to follow
Please encrypt sensitive information that you send by email. You’ll receive a reply from FPT Smart Cloud to acknowledge that we received your report, and we’ll contact you if we need more information.
II. How FPT Smart Cloud handles these reports
For the protection of our customers, FPT Smart Cloud doesn’t disclose, discuss, or confirm security issues until our investigation is complete and any necessary updates are generally available.
FPT Smart Cloud uses security advisories and our security-announce mailing list to publish information about security fixes in our products and to publicly credit people or organizations that have reported security issues to us.
For more information on CVD, please review the information provided in the following links:
https://www.iso.org/standard/72311.html
Security Advisories
FPT Smart Cloud Security Advisories are a supplement to the FPT Smart Cloud Security bulletins. They address security changes that may not require a security bulletin but that may still affect customers’ overall security.
FPT Smart Cloud Security Advisories are a way for FPT Smart Cloud to communicate security information to customers about issues that may not be classified as vulnerabilities and may not require a security bulletin. Each advisory is accompanied by an FPT Smart Cloud Knowledge Base Article to provide additional information about any changes or updates being delivered with the advisory’s release.
Help protect your computing environment by keeping up to date on FPT Smart Cloud technical security notifications. For more information, see FPT Smart Cloud Technical Security Notifications.
