Summary by National Aeronautics and Space Administration (NASA) - Vulnerability Disclosure Program
This is available to the public
Publicly Accessible NASA Internal Shipping Document Exposing Sensitive Information
Disclosed by Rikodesmon- Engagement National Aeronautics and Space Administration (NASA) - Vulnerability Disclosure Program
- Disclosed date 5 months ago
- Priority P3 Bugcrowd's VRT priority rating
- Status Informational This vulnerability is seen as an accepted business risk
Summary by Rikodesmon
Dear NASA Vulnerability Disclosure Program Team,
I hope you are doing well.
I am writing to respectfully follow up regarding my vulnerability disclosure submissions to NASA’s Vulnerability Disclosure Program.
My primary reporter ID is:
Reporter ID: 17695a26-0c6d-4788-91f7-83114e2259d2
I understand and fully respect that some of my submitted reports were assessed as low priority (P5) or marked as duplicate based on your internal triage process. My intention in submitting these reports has always been to contribute in good faith and in accordance with NASA’s VDP guidelines, without exploitation, scanning, or disruption of systems.
Given my continued responsible participation, I would like to kindly ask whether it may be possible to receive an acknowledgement or certificate of appreciation recognizing my contributions to NASA’s coordinated vulnerability disclosure efforts.
Such recognition would be greatly appreciated for my professional development and would motivate me to continue reporting potential security issues responsibly.If there are any requirements, eligibility criteria, or additional information needed from my side, please let me know and I will be happy to comply.
Thank you very much for your time and for maintaining an open and responsible vulnerability disclosure program.
Kind regards,
Riko Desmon