{"id":"6cdf115a-cd7d-4143-9fd0-c0e092fe6678","engagementId":"0c501420-6617-4b4f-8333-2e453ea06976","data":{"brief":{"id":"efd86f56-5db4-4d97-9fc0-8937dfbd594a","name":"Assa Abloy America's ","tagline":"Every day, we help billions of people move through a safer, more open world with ease. If you’ve ever walked through an automatic door, stayed in a hotel, or gone through passport control, you’ve probably used one of our products or services.","description":"\u003cp\u003eASSA ABLOY Opening Solutions Americas and/or any of its group companies (together or\u003cbr\u003e\nindividually, “ASSA ABLOY Americas”) believes that the disclosure of vulnerabilities is essential to\u003cbr\u003e\nimproving the quality of our products and services. ASSA ABLOY Americas values the insights of the\u003cbr\u003e\nsecurity research community and welcomes disclosure and collaboration.\u003c/p\u003e\n\n\u003cp\u003eThrough our responsible disclosure process ASSA ABLOY Americas will work with security\u003cbr\u003e\nresearchers and other vulnerability investigators to make our products and services more secure by\u003cbr\u003e\nproviding a mechanism to privately report vulnerabilities with legitimacy and integrity. Responsible\u003cbr\u003e\ndisclosure ensures that security infrastructure is tested and proven reliable. This process allows us\u003cbr\u003e\nto work collaboratively with the researchers to identify and mitigate vulnerabilities quickly in an\u003cbr\u003e\never-changing security environment.\u003c/p\u003e\n\n\u003ch2\u003eWe appreciate your contributions to protecting our customers, users, and businesses.\u003c/h2\u003e\n\n\u003ch2\u003eRatings/Rewards:\u003c/h2\u003e\n\n\u003cp\u003e\u003cem\u003eFor the initial prioritization/rating of findings, this program will use the \u003ca href=\"https://bugcrowd.com/vulnerability-rating-taxonomy\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eBugcrowd Vulnerability Rating Taxonomy\u003c/a\u003e. However, it is important to note that in some cases a vulnerability priority will be modified due to its likelihood or impact. In any instance where an issue is downgraded, a full, detailed explanation will be provided to the researcher - along with the opportunity to appeal, and make a case for a higher priority.\u003c/em\u003e\u003c/p\u003e","industryTagId":"d3470382-2d32-46e3-91bd-1f826d434c6f","targetsOverview":"\u003ch1\u003eAdditional In Scope Targets\u003c/h1\u003e\n\n\u003cul\u003e\n\u003cli\u003eAdams Rite\n\n\u003cul\u003e\n\u003cli\u003eadamsrite.com\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eAlarm Controls\n\n\u003cul\u003e\n\u003cli\u003ealarmcontrols.com\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eArrow\u003c/li\u003e\n\u003cli\u003eBaron\u003c/li\u003e\n\u003cli\u003eBruken\n\n\u003cul\u003e\n\u003cli\u003ebruken.com.mx\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eCeco Door\n\n\u003cul\u003e\n\u003cli\u003ececodoor.com\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eConcept Frames\u003c/li\u003e\n\u003cli\u003eCorbin Russwin\u003c/li\u003e\n\u003cli\u003eCurries\n\n\u003cul\u003e\n\u003cli\u003ecurries.com\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eFleming\n-flemingdoor.com\u003c/li\u003e\n\u003cli\u003eGo Concourse\n\n\u003cul\u003e\n\u003cli\u003egoconcourse.com\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eHarbor Lockers\n\n\u003cul\u003e\n\u003cli\u003eharborlockers.com\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eHES Innovations\n\n\u003cul\u003e\n\u003cli\u003ehesinnovations.com\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eLaFonte\n\n\u003cul\u003e\n\u003cli\u003elafonte.com.br\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eLifeSafety Power\n\n\u003cul\u003e\n\u003cli\u003eLSPPower.com\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ePlease do not use production for testing. Please use \u003ca href=\"https://t2.lsp-config.com/account/login\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://t2.lsp-config.com/account/login\u003c/a\u003e for all testing\u003c/strong\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eLSPpower\u003c/li\u003e\n\u003cli\u003eMarkar\u003c/li\u003e\n\u003cli\u003eMcKinney\n\n\u003cul\u003e\n\u003cli\u003emckinneyhinge.com\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eMetalika\u003c/li\u003e\n\u003cli\u003eNortonrixson\n\n\u003cul\u003e\n\u003cli\u003enortonrixson.com\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eODIS\u003c/li\u003e\n\u003cli\u003eOlimpia\n\n\u003cul\u003e\n\u003cli\u003eolimpiahardware.com\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eOpenings Studio\n\n\u003cul\u003e\n\u003cli\u003eopeningsstudio.com\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003ePartner Integrations Portal\n\n\u003cul\u003e\n\u003cli\u003eassaabloygroup.my.site.com\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003ePapaiz\u003c/li\u003e\n\u003cli\u003ePestal Pro\n\n\u003cul\u003e\n\u003cli\u003epedestalpro.com\u003c/li\u003e\n\u003cli\u003eblhero.com\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003ePemko\n\n\u003cul\u003e\n\u003cli\u003epemko.com\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003ePhillips\n\n\u003cul\u003e\n\u003cli\u003ephillips.com.mx\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003ePioneer Industries\n\n\u003cul\u003e\n\u003cli\u003epioneerindustries.com\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003ePOLI\n\n\u003cul\u003e\n\u003cli\u003eassaabloy.cl\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003ePRO-TECH\n\n\u003cul\u003e\n\u003cli\u003epro-techsoftware.com\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eRockwood\n\n\u003cul\u003e\n\u003cli\u003erockwoodmfg.com\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eSargent\n\n\u003cul\u003e\n\u003cli\u003esargentlock.com\u003c/li\u003e\n\u003cli\u003esargentandgreenleaf.com\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eSecuritron\n\n\u003cul\u003e\n\u003cli\u003esecuritron.com\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eSecurity Metal Products (SMP)\u003c/li\u003e\n\u003cli\u003eSilvana Assa Abloy\n\n\u003cul\u003e\n\u003cli\u003esilvana.com.br\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eSimpleK\n\n\u003cul\u003e\n\u003cli\u003esimplek.com\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eSiteOwl\n\n\u003cul\u003e\n\u003cli\u003egetsiteowl.com\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eStiles\n\n\u003cul\u003e\n\u003cli\u003estilesdoors.com\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eTESA\n\n\u003cul\u003e\n\u003cli\u003etesa.es\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eUdinese\n\n\u003cul\u003e\n\u003cli\u003eudinese.com.br\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eVault\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch1\u003eCredentials:\u003c/h1\u003e\n\n\u003cp\u003ePlease signup for your own accounts using your @bugcrowdninja.com email address. \u003c/p\u003e\n\n\u003ch1\u003eOut of Scope\u003c/h1\u003e\n\n\u003cp\u003ePlease note that we cannot authorize out-of-scope testing on a third-party products or services. Vulnerabilities discovered in third-party products or services should be reported to appropriate vendor.\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eHTML Injection\u003c/li\u003e\n\u003cli\u003eRate limiting \u003c/li\u003e\n\u003cli\u003eHTTP headers without an associated, exploitable, vulnerability\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch1\u003eReporting\u003c/h1\u003e\n\n\u003cp\u003ePlease use the form on the Report Vulnerability tab to report a vulnerability, or if you prefer by visiting our partner Bugcrowd at https://bugcrowd.com/vulnerability-rating-taxonomy.\u003c/p\u003e\n\n\u003chr\u003e\n\n\u003ch1\u003eDisclosure\u003c/h1\u003e\n\n\u003cp\u003eASSA ABLOY Americas will follow standard industry practices for coordinated and responsible vulnerability disclosure. We ask all vulnerability reporters to do the same by allowing ASSA ABLOY Americas the opportunity to verify and remediate reported vulnerabilities and for us to notify our affected customers and users before you disclose or share the vulnerability or methods to exploit with any third party.\u003c/p\u003e\n\n\u003ch2\u003eASSA ABLOY Americas product security advisories will be made publicly available at https://www.assaabloydss.com/en/resource-center/security-center/product-security-advisories and/or directly communicated to affected customers.\u003c/h2\u003e\n\n\u003ch2\u003eSafe Harbor:\u003c/h2\u003e\n\n\u003cp\u003eASSA ABLOY believes that ethical security research performed in good-faith provides an invaluable public service and has therefore provided this safe harbor program to encourage lawful, authorized security testing of our products and services. Accordingly, ASSA ABLOY will not initiate, pursue or recommend any law enforcement or civil lawsuits related to the specific actions taken by you to discover a security vulnerability, provided that such actions were undertaken in good faith, for the sole purpose of improving the overall security of our products and services, and not for any nefarious or otherwise unlawful purpose. ASSA ABLOY considers any actions undertaken in compliance with this policy to be authorized under the provisions of the Computer Fraud and Abuse Act, the Digital Millennium Copyright Act and similar anti-hacking and anti-circumvention statutes. You are, however, otherwise expected to comply with all applicable laws. If we become aware that government authorities have initiated legal action against you for security research conducted in strict accordance with the terms of this policy, we will advise the applicable government authorities that we consider your actions to have been “authorized” hereunder. Please note that this safe-harbor policy will not apply to security activities performed in accordance with an executed, written agreement between you and ASSA ABLOY, and the terms of any such agreement shall prevail in their entirety over the terms of this policy, which shall not apply in such cases.\u003c/p\u003e\n\n\u003ch1\u003eExpectations\u003c/h1\u003e\n\n\u003cul\u003e\n\u003cli\u003eMake a good-faith effort to avoid harm to ASSA ABLOY Americas, our customers, and our end-users, including, but not limited to: privacy violations, destruction of data, and interruption or degradation of our services.\u003c/li\u003e\n\u003cli\u003eDo not access or attempt to access ASSA ABLOY Americas offices, data centers, or user accounts.\u003c/li\u003e\n\u003cli\u003eDo not test for spam, perform phishing, social engineer, or intentionally cause denial of service issues for ASSA ABLOY Americas services.\u003c/li\u003e\n\u003cli\u003eDo not access or attempt to access our customer or end-users’ offices, data centers, user accounts, or attempt other forms of penetration testing without the direct, written approval of the system owner.\u003c/li\u003e\n\u003cli\u003eComply with all applicable laws and regulations; do not disrupt or compromise any data that is not your own, or further exploit a confirmed vulnerability.\u003c/li\u003e\n\u003cli\u003eIf a vulnerability provides unintended access to data, limit the amount of data you access to the minimum required to demonstrate a proof of concept. After ASSA ABLOY Americas validates your report, properly dispose of all copies of the data.\nPromptly report your findings to us through our approved channels. \u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003e\u003cem\u003eIf at any time you have concerns or are uncertain whether your security research is consistent with this policy, please inquire via \u003ca href=\"https://bugcrowd-support.freshdesk.com/support/tickets/new\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eBugcrowd Support\u003c/a\u003e before going any further.\u003c/em\u003e\u003c/p\u003e","safeHarborStatus":{"status":"full","label":"Safe harbor","description":"This engagement is fully committed to providing safe harbor for good-faith security research."},"collaborationEnabled":true,"additionalInformation":""},"scope":[{"id":"3bbce8d8-0c9e-4050-9677-8aba6e16b08f","name":"Accentra","targets":[{"id":"716312be-747a-4b76-95e1-bfaf7501a452","uri":"https://eacconfig.assaabloy.com","name":"*.eacconfig.assaabloy.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"4519de60-6c33-466c-ac2b-043aaee11363","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"716312be-747a-4b76-95e1-bfaf7501a452"}],"recentChangeFlags":null},{"id":"86821b4d-3edc-4b7b-88b7-558d882b64ca","uri":"https://accentra.assaabloy.com","name":"*.accentra.assaabloy.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"533170e2-0076-41f9-8a10-0df67556517d","sortOrder":1},"sortOrder":1,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"86821b4d-3edc-4b7b-88b7-558d882b64ca"}],"recentChangeFlags":null},{"id":"6379859d-fe7a-4505-8cbb-aeda75bbb8f4","uri":"https://yale.accentra.assaabloy.com","name":"*.yale.accentra.assaabloy.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"eb13a766-bc7e-4ea8-bb04-26dc4905fb54","sortOrder":2},"sortOrder":2,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"6379859d-fe7a-4505-8cbb-aeda75bbb8f4"}],"recentChangeFlags":null},{"id":"360eae0d-3a4e-435b-896a-40d85b25bc0a","uri":"https://apps.apple.com/us/app/yale-accentra-access/id1523678122","name":"Yale Accentra iOS App","category":"ios","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"f56429d3-03c9-4b6b-83b5-bfb909c6eece","sortOrder":3},"sortOrder":3,"tags":[{"id":"e251f4f0-1204-4c8a-9e12-dba8fdaadf48","name":"iOS","targetId":"360eae0d-3a4e-435b-896a-40d85b25bc0a"}],"recentChangeFlags":null},{"id":"e9399f87-e1f4-4a87-9720-bdded3a53916","uri":"https://play.google.com/store/apps/details?id=com.assaabloy.accentra.access","name":"Accentra Access Android App","category":"android","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"7fdd4982-87ce-44ac-bfc6-791d23d19605","sortOrder":4},"sortOrder":4,"tags":[{"id":"ee1461dd-e5fd-4e9d-8c95-0344ba08bdc2","name":"Android","targetId":"e9399f87-e1f4-4a87-9720-bdded3a53916"}],"recentChangeFlags":null},{"id":"cceb46b8-a3e2-484b-8ea2-198ddcabb3ea","uri":"https://play.google.com/store/apps/details?id=com.yale.multifamconftool","name":"Yale Accentra Configuration Android App","category":"android","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"78266548-5aa3-4cd5-98af-7429e113d73c","sortOrder":5},"sortOrder":5,"tags":[{"id":"ee1461dd-e5fd-4e9d-8c95-0344ba08bdc2","name":"Android","targetId":"cceb46b8-a3e2-484b-8ea2-198ddcabb3ea"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":0,"description":null,"rewardRange":null,"descriptionHtml":null,"rewardRangeData":{},"recentChangeFlags":null},{"id":"de50187f-1594-4913-9f8a-90ae63ae324a","name":"Centrios","targets":[{"id":"f00bfab8-c024-4034-913f-cc7862536da6","uri":"https://centrios.com","name":"*.centrios.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"63caead8-52ee-45a4-a19d-6dc9dbd92813","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"f00bfab8-c024-4034-913f-cc7862536da6"}],"recentChangeFlags":null},{"id":"99cf50aa-7ce1-4634-bbbe-e5c6b74425d8","uri":"https://apps.apple.com/in/app/centrios/id6449100322","name":"Centrios iOS App","category":"ios","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"6812b760-f1ef-4263-a147-fd1063cff707","sortOrder":1},"sortOrder":1,"tags":[{"id":"e251f4f0-1204-4c8a-9e12-dba8fdaadf48","name":"iOS","targetId":"99cf50aa-7ce1-4634-bbbe-e5c6b74425d8"}],"recentChangeFlags":null},{"id":"da6c5ff5-2d63-459d-b15f-7fdf30ebb96a","uri":"https://play.google.com/store/apps/details?id=com.assaabloy.centrios","name":"Centrios Android App","category":"android","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"c59b0d2c-c603-4cb9-a28f-c062b597db0d","sortOrder":2},"sortOrder":2,"tags":[{"id":"ee1461dd-e5fd-4e9d-8c95-0344ba08bdc2","name":"Android","targetId":"da6c5ff5-2d63-459d-b15f-7fdf30ebb96a"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":1,"description":null,"rewardRange":null,"descriptionHtml":null,"rewardRangeData":{},"recentChangeFlags":null},{"id":"2e5c6024-2f6c-408c-9f29-33ac252d5d5f","name":"ControlID","targets":[{"id":"1315827f-be5b-4b4f-bf19-d7e9897b9ab6","uri":"https://idsecure.com.br","name":"*.idsecure.com.br","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"ef88abe7-b9cd-4bdc-adb6-31d3febea77d","sortOrder":0},"sortOrder":0,"tags":[{"id":"6d7a6e43-c245-4bb8-a9ff-a25acc5ac57a","name":"Google Web Toolkit","targetId":"1315827f-be5b-4b4f-bf19-d7e9897b9ab6"}],"recentChangeFlags":null},{"id":"56154916-6b4c-4c3a-a31f-3004c5e7d974","uri":"https://controlid.com.br","name":"*.controlid.com.br","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"c1ba7fa9-60d9-4cc7-8d8b-2c615921f55d","sortOrder":1},"sortOrder":1,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"56154916-6b4c-4c3a-a31f-3004c5e7d974"}],"recentChangeFlags":null},{"id":"9c5f3e53-ec9d-4a5c-852a-7eb9b8f39f73","uri":"https://apps.apple.com/us/app/rhid/id1493410750","name":"ControlID iOS App","category":"ios","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"a63d0e4d-2286-4f32-913b-f170572b97a9","sortOrder":2},"sortOrder":2,"tags":[{"id":"e251f4f0-1204-4c8a-9e12-dba8fdaadf48","name":"iOS","targetId":"9c5f3e53-ec9d-4a5c-852a-7eb9b8f39f73"}],"recentChangeFlags":null},{"id":"c03d8e13-6ccb-4b7e-ab69-b946670e9de7","uri":"https://play.google.com/store/apps/details?id=br.com.controlid.rhid\u0026hl=en\u0026gl=US","name":"ControlID Android App","category":"android","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"0520a609-6283-4e50-9d16-4d0330ab7c32","sortOrder":3},"sortOrder":3,"tags":[{"id":"ee1461dd-e5fd-4e9d-8c95-0344ba08bdc2","name":"Android","targetId":"c03d8e13-6ccb-4b7e-ab69-b946670e9de7"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":2,"description":null,"rewardRange":null,"descriptionHtml":null,"rewardRangeData":{},"recentChangeFlags":null},{"id":"4083abd5-06de-40d8-8909-ea96f5ee1c8e","name":"Kwikset / Halo","targets":[{"id":"d429fcb5-f758-40e0-8ac3-287103a593e6","uri":"https://kwiksetunite.com","name":"*.kwiksetunite.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"8cf8c098-6066-4c3e-8e56-1e7cc0717ce4","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"d429fcb5-f758-40e0-8ac3-287103a593e6"}],"recentChangeFlags":null},{"id":"de23b802-8304-44b5-b9e8-859df7483d06","uri":"https://goconcourse.com","name":"*.goconcourse.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"c4f770b3-18a3-4bc3-a859-5b6a02a63144","sortOrder":1},"sortOrder":1,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"de23b802-8304-44b5-b9e8-859df7483d06"}],"recentChangeFlags":null},{"id":"61f7d5f5-e4b1-46b8-b7c7-01639a8f4c4d","uri":"https://apps.apple.com/us/app/kwikset/id1465996742?ls=1","name":"Kwikset iOS App","category":"ios","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"c185c163-fd1d-4fba-bc34-e45a5bfb727d","sortOrder":2},"sortOrder":2,"tags":[{"id":"e251f4f0-1204-4c8a-9e12-dba8fdaadf48","name":"iOS","targetId":"61f7d5f5-e4b1-46b8-b7c7-01639a8f4c4d"}],"recentChangeFlags":null},{"id":"54e837b2-dd94-4167-a33c-da62198d412e","uri":"https://play.google.com/store/apps/details?id=com.kwikset.blewifi","name":"Kwikset Android App","category":"android","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"07734080-ada8-42d4-8738-6b8c96c53ddd","sortOrder":3},"sortOrder":3,"tags":[{"id":"ee1461dd-e5fd-4e9d-8c95-0344ba08bdc2","name":"Android","targetId":"54e837b2-dd94-4167-a33c-da62198d412e"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":3,"description":null,"rewardRange":null,"descriptionHtml":null,"rewardRangeData":{},"recentChangeFlags":null},{"id":"c4d14b9e-5c3c-4a85-9d96-5408a50f8298","name":"Level","targets":[{"id":"529a2028-ae40-45a1-905b-6b1c421f6254","uri":"https://level.co","name":"*.level.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"897b501b-39ea-436c-8292-cb9e93df7ac9","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"529a2028-ae40-45a1-905b-6b1c421f6254"}],"recentChangeFlags":null},{"id":"4808a7e2-4056-4436-b919-9ce89191cc68","uri":"https://play.google.com/store/apps/details?id=co.level.app","name":"Level Android App","category":"android","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"f3fd9512-8a94-46a7-9d5e-e922c3991888","sortOrder":1},"sortOrder":1,"tags":[{"id":"ee1461dd-e5fd-4e9d-8c95-0344ba08bdc2","name":"Android","targetId":"4808a7e2-4056-4436-b919-9ce89191cc68"}],"recentChangeFlags":null},{"id":"7f029891-b4f5-4d45-8b4d-c3cc5924a401","uri":"https://apps.apple.com/us/app/level-home/id1490027518","name":"Level iOS App","category":"ios","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"e2dbdbdb-e34b-4dee-8aa2-4195b08d2798","sortOrder":2},"sortOrder":2,"tags":[{"id":"e251f4f0-1204-4c8a-9e12-dba8fdaadf48","name":"iOS","targetId":"7f029891-b4f5-4d45-8b4d-c3cc5924a401"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":4,"description":null,"rewardRange":null,"descriptionHtml":null,"rewardRangeData":{},"recentChangeFlags":null},{"id":"f718239c-62c3-4bf0-a158-65edef1d7929","name":"LuxerOne","targets":[{"id":"97b0ef4c-ea3d-4b7c-b442-77d0602c3960","uri":"https://luxerone.com","name":"*.luxerone.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"c93b6924-9467-4f48-9430-d68030f1c5b4","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"97b0ef4c-ea3d-4b7c-b442-77d0602c3960"}],"recentChangeFlags":null},{"id":"671b2056-1931-47e7-a119-590fda72a068","uri":"https://apps.apple.com/us/app/luxer-one/id1440094075","name":"LuxerOne iOS App","category":"ios","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"9d38f8e3-f860-4f46-9bde-b294dda0e3e1","sortOrder":1},"sortOrder":1,"tags":[{"id":"e251f4f0-1204-4c8a-9e12-dba8fdaadf48","name":"iOS","targetId":"671b2056-1931-47e7-a119-590fda72a068"}],"recentChangeFlags":null},{"id":"476bd73f-7b22-4543-b166-0b137288eef0","uri":"https://play.google.com/store/apps/details?id=com.luxerone.mobile.residentapp","name":"LuxerOne Android App","category":"android","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"d4233c15-1afc-4d1c-a14b-58f274984b65","sortOrder":2},"sortOrder":2,"tags":[{"id":"ee1461dd-e5fd-4e9d-8c95-0344ba08bdc2","name":"Android","targetId":"476bd73f-7b22-4543-b166-0b137288eef0"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":5,"description":null,"rewardRange":null,"descriptionHtml":null,"rewardRangeData":{},"recentChangeFlags":null},{"id":"88f31e17-a7d1-47d1-b29e-ae9f9283a03e","name":"Medeco","targets":[{"id":"75d26cbf-4084-429b-97b2-a8ce9f3cd893","uri":"https://roa.assaabloy.net","name":"*.roa.assaabloy.net","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"e9508f2b-2c2f-4741-80fc-34cf796989b0","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"75d26cbf-4084-429b-97b2-a8ce9f3cd893"}],"recentChangeFlags":null},{"id":"42f05ff6-cd47-4d56-a37f-58805c61a58e","uri":"https://roa.medeco.com","name":"*.roa.medeco.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"7c423c6e-28e0-4ada-bf35-4271a11a4bde","sortOrder":1},"sortOrder":1,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"42f05ff6-cd47-4d56-a37f-58805c61a58e"}],"recentChangeFlags":null},{"id":"e2523e92-c240-476c-9ecc-6c2d278a763f","uri":"https://bittings.medeco.com","name":"*.bittings.medeco.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"722cc73c-710c-4839-ad97-d8967a3c900b","sortOrder":2},"sortOrder":2,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"e2523e92-c240-476c-9ecc-6c2d278a763f"}],"recentChangeFlags":null},{"id":"da8590aa-cac9-4331-9ee1-47b7e49ad363","uri":"https://test-bittings.medeco.com","name":"*.test-bittings.medeco.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"0993c40e-fd21-4c2d-857d-f7d714fc511b","sortOrder":3},"sortOrder":3,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"da8590aa-cac9-4331-9ee1-47b7e49ad363"}],"recentChangeFlags":null},{"id":"d74307f6-bf2e-4964-a1a2-f5790394f65d","uri":"https://test-keycontrol.medeco.com","name":"*.test-keycontrol.medeco.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"87b8dc5d-febf-4b44-a900-7ab2211a58be","sortOrder":4},"sortOrder":4,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"d74307f6-bf2e-4964-a1a2-f5790394f65d"}],"recentChangeFlags":null},{"id":"e0bdef5f-1e64-473b-9906-1d28b28c22cc","uri":"https://ca-roa.medeco.com","name":"*.ca-roa.medeco.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"5a3460f6-2e03-44e1-87ed-11d820ec9018","sortOrder":5},"sortOrder":5,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"e0bdef5f-1e64-473b-9906-1d28b28c22cc"}],"recentChangeFlags":null},{"id":"09a14f3d-d77c-4086-9286-b5b79e329749","uri":"https://test-roa.medeco.com","name":"*.test-roa.medeco.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"97f61252-7438-4077-9cae-473a68803fdd","sortOrder":6},"sortOrder":6,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"09a14f3d-d77c-4086-9286-b5b79e329749"}],"recentChangeFlags":null},{"id":"873ef9b9-eefb-4b2f-b64a-db70cc67479e","uri":"https://keycontrol.medeco.com","name":"*.keycontrol.medeco.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"d243be36-a638-4c6b-ab8f-3eff7a1e9b4e","sortOrder":7},"sortOrder":7,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"873ef9b9-eefb-4b2f-b64a-db70cc67479e"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":6,"description":null,"rewardRange":null,"descriptionHtml":null,"rewardRangeData":{},"recentChangeFlags":null},{"id":"c7fe46b6-02b9-422e-981f-fbf53348ae9a","name":"Openings Studio","targets":[{"id":"80c6525f-002f-4a2c-bc40-1d6bd6236733","uri":"https://knowledge.openingsstudio.com","name":"*.knowledge.openingsstudio.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"59fba45d-92f8-4cc8-a2ab-c92f5d8a0e30","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"80c6525f-002f-4a2c-bc40-1d6bd6236733"}],"recentChangeFlags":null},{"id":"6252c6dc-8dcc-4d1c-9687-6d784526053f","uri":"https://manage.openingsstudio.com","name":"*.manage.openingsstudio.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"919717b8-360a-403a-b087-1a7d20a47058","sortOrder":1},"sortOrder":1,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"6252c6dc-8dcc-4d1c-9687-6d784526053f"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":7,"description":null,"rewardRange":null,"descriptionHtml":null,"rewardRangeData":{},"recentChangeFlags":null},{"id":"98a04aa2-65c2-4ebb-bb7c-69c72b96b9de","name":"Yale (LATAM)","targets":[{"id":"cdb9f55f-2cf7-4ae3-b269-c78ded3050a5","uri":"https://yalelatinoamerica.com","name":"*.yalelatinoamerica.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"e9c7827e-7fe9-49a8-8f6a-221136555419","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"cdb9f55f-2cf7-4ae3-b269-c78ded3050a5"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":8,"description":null,"rewardRange":null,"descriptionHtml":null,"rewardRangeData":{},"recentChangeFlags":null},{"id":"ea19a999-dac5-47b9-a81e-879673556564","name":"Yale Connect","targets":[{"id":"e32ef9d1-dbac-4e7f-b371-7b87a18e922e","uri":"https://yaleconnecthub.com","name":"*.yaleconnecthub.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"8f06fa60-ad2d-4e4b-b5a6-b582143eec7c","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"e32ef9d1-dbac-4e7f-b371-7b87a18e922e"}],"recentChangeFlags":null},{"id":"23b6bc5b-8148-4318-9483-d5778074f30b","uri":"https://play.google.com/store/apps/details?id=com.assaabloy.yaleconnect","name":"Yale Connect Android App","category":"android","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"d270be4e-80c1-44d7-b888-936935124ae7","sortOrder":1},"sortOrder":1,"tags":[{"id":"ee1461dd-e5fd-4e9d-8c95-0344ba08bdc2","name":"Android","targetId":"23b6bc5b-8148-4318-9483-d5778074f30b"}],"recentChangeFlags":null},{"id":"1def53bb-544f-4581-b732-f40a2498b738","uri":"https://apps.apple.com/cr/app/yale-connect/id1204336886","name":"Yale Connect iOS App","category":"ios","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"d9616aa2-1695-46f5-a620-e467819c0954","sortOrder":2},"sortOrder":2,"tags":[{"id":"e251f4f0-1204-4c8a-9e12-dba8fdaadf48","name":"iOS","targetId":"1def53bb-544f-4581-b732-f40a2498b738"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":9,"description":null,"rewardRange":null,"descriptionHtml":null,"rewardRangeData":{},"recentChangeFlags":null}],"resources":[],"engagement":{"id":"0c501420-6617-4b4f-8333-2e453ea06976","code":"assaabloy-americas-vdp","state":"in_progress","endsAt":null,"bountyId":"509fc0a1-2a37-4b55-9282-e9c42d506d5a","startsAt":"2022-11-01T18:00:00Z"},"vrtScopeRules":[],"engagementConfiguration":{"participation":"open","crowdSelectionStrategy":"none"}},"industryName":"Corporate Services","methodologyName":null,"logoUrl":"https://logos.bugcrowdusercontent.com/logos/6865/ad80/0d87c858/3719b7902005e2a5cfc40e1bc56e6687_assaabloy.png","logoBackgroundColor":"#fff","displayDisclosureTerms":true,"coordinatedDisclosure":true,"collaborationEnabled":true,"participation":"open","rewardAllocation":"no_reward","engagementTypeDetail":{"iconVariant":"vdp","productLabel":"Vulnerability Disclosure","timeboxed":false},"pausedReason":null,"lastTransitionAt":"2022-11-01T18:00:00.000Z","cancellationReason":null,"statusLabel":"In progress","routesPaths":{"brief":"/engagements/assaabloy-americas-vdp","changelogs":"/engagements/assaabloy-americas-vdp/changelog","submissions":null,"announcements":"/engagements/assaabloy-americas-vdp/announcements","hallOfFame":"/engagements/assaabloy-americas-vdp/hall_of_fames","crowdstream":"/engagements/assaabloy-americas-vdp/crowdstream"},"announcementsCount":11,"knownIssuesEnabled":true,"isDemo":false,"serviceLevel":"Platform","submitReportUrl":"/engagements/assaabloy-americas-vdp/submissions/new","methodologyUrl":null,"progressPercentage":0,"badgeVariant":null,"userBannedFromEngagement":null,"isLoggedIn":false,"loginUrl":"/user/sign_in","scopedSubmissionsUrl":"/submissions?engagement%5B%5D=assaabloy-americas-vdp\u0026sort%5B%5D=submitted-desc","isFollowing":null,"credentialsUrl":null,"toggleSubscriptionUrl":"/assaabloy-americas-vdp/engagement_subscribers","engagementChangelogsUrl":"/engagements/assaabloy-americas-vdp/changelog","publishedAt":"2026-02-19T19:22:30.583Z","engagementChangelogUrl":"/engagements/assaabloy-americas-vdp/changelog/6cdf115a-cd7d-4143-9fd0-c0e092fe6678","createUserFeedbacksUrl":"/engagements/assaabloy-americas-vdp/feedbacks","engagementCrowdstreamUrl":"/engagements/assaabloy-americas-vdp/crowdstream","acceptedSubmissionsEnabled":true,"disclosedReportsEnabled":true,"engagementsUrl":"/engagements","engagementPaymentDetailUrl":null,"shouldShowHideButton":false,"engagementHiddenData":{},"totalRewardPool":null,"vrtScopeRules":{"data":[]},"vrtVersion":"1.19.1","isSubmissionPublishThrottled":false,"showIdVerificationAlert":false,"identityVerificationSettingsUrl":"https://bugcrowd.com/h/settings/identity_verification","identityUrl":null}