Documentation for Crowd 1.5. Documentation for other versions of Crowd is available too.

This page has information on how to report any security bugs you might find in Crowd, and what we will do to fix the problem and announce the solution.

On this page:

セキュリティ脆弱性の発見と報告

If you find a vulnerability in Crowd, please take the following steps to report it:

  1. Raise an issue on http://jira.atlassian.com:
    • Project — 'Crowd'
    • Issue Type — 'Bug'
    • Security Level — 'Reporters and Developers'
    • Priority — 'Blocker'
  2. Provide as much information as possible on how to reproduce the bug.

Please conduct all communication about the vulnerability through JIRA, so that we can keep track of the issue and get a patch out as soon as possible.

Publication of Security Advisories

When a security issue is discovered in Crowd, we will resolve it as quickly as possible. Once we have a solution, we will let our customers know as follows:

  • We will add a security advisory as a child of this page.
  • We will post a copy of the advisory in the Crowd Knowledge Base.

セキュリティレベル

[Unable to render {include} The included page could not be found. ({include} をレンダリングできません。ページが見つかりませんでした)] を選択し、

Patches and Fixes

When a security issue has been resolved, we will make the solution available as follows:

  • We will release a bug-fix version of Crowd as soon as possible.
  • Where feasible, we will issue a patch for the current stable version of Crowd and for older versions of Crowd. Patches will be attached to the relevant JIRA issue.

公開済みのセキュリティ勧告

  • ラベルなし