{"id":"507b321c-25a9-4552-b8b8-ae7f20cabc02","engagementId":"35de7af3-1258-4261-b2e8-6f9752ea75d9","data":{"brief":{"id":"6f62591b-dbfb-46e9-ad2a-3186f9f3b9ca","name":"United Airlines","tagline":"United Airlines Vulnerability Disclosure Program","description":"\u003cp\u003eAt United, safety and trust guide everything we do — on the ground, in the air and across our digital experiences. We are committed to protecting the security and privacy of our customers, employees and partners by applying strong security practices and continuously improving our systems.\u003c/p\u003e\n\n\u003cp\u003eUnited’s Vulnerability Disclosure Program (VDP) provides a responsible way for security researchers to report potential vulnerabilities affecting our websites, applications and greater digital platforms. Submissions that meet our program guidelines may be eligible for recognition or reward in appreciation of your contribution.\u003c/p\u003e\n\n\u003ch2\u003eRatings/Rewards:\u003c/h2\u003e\n\n\u003cp\u003e\u003cem\u003eFor the initial prioritization/rating of findings, this program will use the \u003ca href=\"https://bugcrowd.com/vulnerability-rating-taxonomy\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eBugcrowd Vulnerability Rating Taxonomy\u003c/a\u003e. However, it is important to note that in some cases a vulnerability priority will be modified due to its likelihood or impact. In any instance where an issue is downgraded, a full, detailed explanation will be provided to the researcher - along with the opportunity to appeal, and make a case for a higher priority.\u003c/em\u003e\u003c/p\u003e\n\n\u003cp\u003eThe reward for disclosing an eligible vulnerability may vary depending on the severity of the vulnerability. The United Security team will determine the severity of the vulnerability after reviewing the submission, using a combination of the Common Vulnerability Scoring System (CVSS) and OWASP Risk Rating Methodology. Researchers will be paid out upon successful validation of their submission.  Several submissions may be considered one vulnerability at United's discretion. \u003c/p\u003e\n\n\u003ch1\u003eEligibility requirements\u003c/h1\u003e\n\n\u003cp\u003eTo ensure that submissions and payouts are fair and relevant, the researcher and the vulnerability must be eligible according the United disclosure program terms, including, but not limited to, the following requirements:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eAll vulnerabilities must be new discoveries. Award miles will be provided only to the first researcher who submits a particular vulnerability.\u003c/li\u003e\n\u003cli\u003eThe researcher must be a MileagePlus® member in good standing of at least 18 years of age. If you're not yet a member, join the \u003ca href=\"https://www.united.com/ual/en/us/account/enroll/default\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eMileagePlus program now\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eThe researcher must not reside in \u003ca href=\"https://www.bis.doc.gov/index.php/policy-guidance/country-guidance/sanctioned-destinations\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ea country currently on a United States sanctions list\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eThe researcher submitting the vulnerability must not be a current or former employee of United Airlines, any Star Alliance™ member airline or any other partner airline, a contractor of United Airlines, or a family member or household member of an employee of United Airlines or any partner airline.\u003c/li\u003e\n\u003cli\u003eThe researcher submitting the vulnerability must not be the author of or have any prior affiliation with the vulnerable code.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eRules of Engagement:\u003c/h2\u003e\n\n\u003cul\u003e\n\u003cli\u003eProvide details of the vulnerability finding, including information needed to reproduce and validate the vulnerability using the submission form.\u003c/li\u003e\n\u003cli\u003eAll vulnerabilities must pose a security threat in order to be eligible for a reward. United is ultimately responsible for determining the severity of an issue.\u003c/li\u003e\n\u003cli\u003eVulnerabilities or potential vulnerabilities you discover may not at any time be disclosed publicly or to a third-party. Doing so will disqualify you from receiving award miles.\u003c/li\u003e\n\u003cli\u003eDo not attempt to conduct post-exploitation, including modification or destruction of data, and interruption or degradation of United services.\u003c/li\u003e\n\u003cli\u003eDo not attempt to perform brute-force attacks, denial-of-service attacks, compromise or testing of United accounts that are not your own.\u003c/li\u003e\n\u003cli\u003eDo not attempt any testing on aircraft or aircraft systems such as inflight entertainment or inflight Wi-Fi.\u003c/li\u003e\n\u003cli\u003eDo not attempt to target United employees or customers using methods, including social engineering attacks, phishing attacks or physical attacks.\u003c/li\u003e\n\u003cli\u003eDo not perform physical attacks against United airport facilities.\u003c/li\u003e\n\u003cli\u003eDo not use automated scanners/tools.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003chr\u003e\n\n\u003cp\u003e\u003cem\u003eTesting is only authorized on the targets listed as In-Scope. Any domain/property of United not listed in the targets section is out of scope. This includes any/all subdomains not listed above.  IF you happen to identify a security vulnerability on a target that is not in-scope, but that demonstrably belongs to United, it may be reported to this program and \u003cstrong\u003eat United's discretion may be accepted and eligible for a reduced payout amount. Otherwise, out of scope submissions will be marked as ‘not applicable’ and will not be eligible for miles or points-based compensation.\u003c/strong\u003e\u003c/em\u003e\u003c/p\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eSubmission Instructions:\u003c/h2\u003e\n\n\u003cp\u003e\u003cstrong\u003ePlease be aware that this program does not pay out any monetary rewards, they pay out in frequent flier miles for the United MileagePlus Program.\u003c/strong\u003e\u003c/p\u003e\n\n\u003cp\u003eWhen submitting to the United program for the first time, please retrieve the tax forms from the below URLs and fill them out. When you make your first submission, encrypt the file with the attached \u003cspan class=\"rp-resources__download-link bc-m-0 bc-icon bc-icon--after cc-icon--download\" data-tooltip-id=\"f6a30717-ca29-4536-bddc-5e335c751411\"\u003e\u003ca href=\"https://bugcrowd.com/engagements/united-vdp/attachments/f6a30717-ca29-4536-bddc-5e335c751411\" download\u003eUnited_VDP_Public_Key.txt\u003c/a\u003e\u003c/span\u003e. This will allow the United team to process your tax form at the end of the year for any miles that you have earned on the program. \u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003e\u003cspan class=\"rp-resources__download-link bc-m-0 bc-icon bc-icon--after cc-icon--download\" data-tooltip-id=\"6461468a-50c4-4bf6-a70c-0b40d9981b09\"\u003e\u003ca href=\"https://bugcrowd.com/engagements/united-vdp/attachments/6461468a-50c4-4bf6-a70c-0b40d9981b09\" download\u003eW8BEN.pdf\u003c/a\u003e\u003c/span\u003e\u003c/li\u003e\n\u003cli\u003e\u003cspan class=\"rp-resources__download-link bc-m-0 bc-icon bc-icon--after cc-icon--download\" data-tooltip-id=\"cd433568-a993-42f8-aaef-09a0ca3c7276\"\u003e\u003ca href=\"https://bugcrowd.com/engagements/united-vdp/attachments/cd433568-a993-42f8-aaef-09a0ca3c7276\" download\u003eW9.pdf\u003c/a\u003e\u003c/span\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003eIf you do not wish to receive miles for your submission and would like to have them donated to the charity of your choice, that is acceptable as well. Please include the charity that you would like them donated too. \u003c/p\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eUnited Airlines Vulnerability Disclosure Program Terms \u0026amp; Conditions\u003c/h2\u003e\n\n\u003cp\u003eBy participating in the United Airlines Vulnerability Disclosure Program, you agree to comply with the program requirements outlined in this Bugcrowd Engagement Brief as well as the United Airlines Vulnerability Disclosure Program Terms \u0026amp; Conditions.\u003c/p\u003e\n\n\u003cp\u003ePlease review the complete terms before testing:\u003c/p\u003e\n\n\u003cp\u003e\u003cstrong\u003eUnited Airlines Vulnerability Disclosure Program Terms \u0026amp; Conditions:\u003c/strong\u003e\u003cbr\u003e\n\u003ca href=\"https://www.united.com/en/us/fly/united-airlines-vulnerability-disclosure-program.html\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://www.united.com/en/us/fly/united-airlines-vulnerability-disclosure-program.html\u003c/a\u003e\u003c/p\u003e\n\n\u003cp\u003e\u003cem\u003eIn the event of any inconsistency between this Engagement Brief and the United Airlines Vulnerability Disclosure Program Terms \u0026amp; Conditions, the United Airlines Vulnerability Disclosure Program Terms \u0026amp; Conditions shall govern.\u003c/em\u003e\u003c/p\u003e\n\n\u003chr\u003e","industryTagId":"2bf483dc-2f0b-4e2d-b7f0-568b8cc28809","targetsOverview":"\u003chr\u003e\n\n\u003ch2\u003eSafe Harbor:\u003c/h2\u003e\n\n\u003cp\u003e\u003cstrong\u003eWhen conducting vulnerability research according to this policy, we consider this research to be:\u003c/strong\u003e\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eAuthorized in accordance with the Computer Fraud and Abuse Act (CFAA) (and/or similar state laws), and we will not initiate or support legal action against you for accidental, good faith violations of this policy;\u003c/li\u003e\n\u003cli\u003eExempt from the Digital Millennium Copyright Act (DMCA), and we will not bring a claim against you for circumvention of technology controls;\u003c/li\u003e\n\u003cli\u003eExempt from restrictions in our Terms \u0026amp; Conditions that would interfere with conducting security research, and we waive those restrictions on a limited basis for work done under this policy; and\u003c/li\u003e\n\u003cli\u003eLawful, helpful to the overall security of the Internet, and conducted in good faith.\u003c/li\u003e\n\u003cli\u003eYou are expected, as always, to comply with all applicable laws.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003e\u003cem\u003eIf at any time you have concerns or are uncertain whether your security research is consistent with this policy, please inquire via support@bugcrowd.com before going any further.\u003c/em\u003e\u003c/p\u003e","safeHarborStatus":{"status":"full","label":"Safe harbor","description":"This engagement is fully committed to providing safe harbor for good-faith security research."},"collaborationEnabled":true,"additionalInformation":""},"scope":[{"id":"bdac3e63-1e7f-4003-aa37-f5f1f398c8b1","name":"In Scope Targets","targets":[{"id":"f6c367ca-5db2-4bc2-bfb5-5ad48fdf38f8","uri":"","name":"*.united.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"cb6a4a82-0544-4165-9706-ab527bd2f503","sortOrder":0},"sortOrder":0,"tags":[{"id":"08e84ba6-1e84-4c11-b559-a3b3b963546f","name":"Akamai CDN","targetId":"f6c367ca-5db2-4bc2-bfb5-5ad48fdf38f8"},{"id":"6481be19-8d64-4bb2-8426-2f1f7afe32e6","name":"Modernizr","targetId":"f6c367ca-5db2-4bc2-bfb5-5ad48fdf38f8"},{"id":"9c63a0f4-0db6-40da-85f0-65d0aa72bfbe","name":"Windows","targetId":"f6c367ca-5db2-4bc2-bfb5-5ad48fdf38f8"},{"id":"9dded18a-fb38-4faa-b2ac-82845ca03735","name":"ReactJS","targetId":"f6c367ca-5db2-4bc2-bfb5-5ad48fdf38f8"},{"id":"9f26f47e-4acd-4d8d-aad2-414b6b367eb0","name":"Handlebars","targetId":"f6c367ca-5db2-4bc2-bfb5-5ad48fdf38f8"},{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"f6c367ca-5db2-4bc2-bfb5-5ad48fdf38f8"},{"id":"a5bf7fc5-03c4-42f4-b10d-5ceb23d1c064","name":"Lodash","targetId":"f6c367ca-5db2-4bc2-bfb5-5ad48fdf38f8"},{"id":"b6333057-ce1f-4205-bcb6-ce56be83543b","name":"Microsoft IIS","targetId":"f6c367ca-5db2-4bc2-bfb5-5ad48fdf38f8"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"f6c367ca-5db2-4bc2-bfb5-5ad48fdf38f8"}],"recentChangeFlags":null},{"id":"73aa775e-a70a-4338-8e07-0db54a7bcefa","uri":"","name":"*.ual.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"91de4ece-d7f9-4af2-917b-747d7f432b70","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"42e4e7b3-d97d-442e-9d25-db7ef24a5005","uri":"","name":"United Mobile App for iOS","category":"ios","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"47a45671-a6c7-46e1-9b0c-ad1f41776950","sortOrder":0},"sortOrder":0,"tags":[{"id":"a6a12b60-e857-44a3-9cc9-3aa9a21aa203","name":"Mobile Application Testing","targetId":"42e4e7b3-d97d-442e-9d25-db7ef24a5005"},{"id":"e251f4f0-1204-4c8a-9e12-dba8fdaadf48","name":"iOS","targetId":"42e4e7b3-d97d-442e-9d25-db7ef24a5005"}],"recentChangeFlags":null},{"id":"be970e51-a60f-49e1-9892-2e360dcec9a4","uri":"","name":"United Mobile App for Android","category":"android","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"fc84bf80-fda3-45d6-8c1b-da87c5705b70","sortOrder":0},"sortOrder":0,"tags":[{"id":"a6a12b60-e857-44a3-9cc9-3aa9a21aa203","name":"Mobile Application Testing","targetId":"be970e51-a60f-49e1-9892-2e360dcec9a4"},{"id":"ee1461dd-e5fd-4e9d-8c95-0344ba08bdc2","name":"Android","targetId":"be970e51-a60f-49e1-9892-2e360dcec9a4"}],"recentChangeFlags":null},{"id":"34244e90-a357-4b96-b2a1-f131d35fe13b","uri":"","name":"MileagePlus X App for iOS","category":"ios","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"885ef524-bfd4-4a56-bda1-1e9944cb7735","sortOrder":0},"sortOrder":0,"tags":[{"id":"a6a12b60-e857-44a3-9cc9-3aa9a21aa203","name":"Mobile Application Testing","targetId":"34244e90-a357-4b96-b2a1-f131d35fe13b"},{"id":"e251f4f0-1204-4c8a-9e12-dba8fdaadf48","name":"iOS","targetId":"34244e90-a357-4b96-b2a1-f131d35fe13b"}],"recentChangeFlags":null},{"id":"993f7ebd-d25c-4937-a919-e54f00cabc99","uri":"","name":"MileagePlus X App for Android","category":"android","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"efc46183-6d7f-494d-a0cd-139e0822c1df","sortOrder":0},"sortOrder":0,"tags":[{"id":"a6a12b60-e857-44a3-9cc9-3aa9a21aa203","name":"Mobile Application Testing","targetId":"993f7ebd-d25c-4937-a919-e54f00cabc99"},{"id":"ee1461dd-e5fd-4e9d-8c95-0344ba08bdc2","name":"Android","targetId":"993f7ebd-d25c-4937-a919-e54f00cabc99"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":0,"description":null,"rewardRange":null,"descriptionHtml":"\u003ch2\u003eTarget information:\u003c/h2\u003e\n\n\u003cp\u003eUnited may determine from time to time what constitutes an eligible vulnerability. Below is a summary of all the targets for which United will review vulnerability submissions:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eUnited Airlines commercial website (united.com)\u003c/li\u003e\n\u003cli\u003eUnited iOS and Android apps\n\n\u003cul\u003e\n\u003cli\u003eThe United iOS application can be downloaded from the \u003ca href=\"https://apps.apple.com/us/app/united-airlines/id449945214\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eApple App Store\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eThe United Android application can be downloaded from the \u003ca href=\"https://play.google.com/store/apps/details?id=com.united.mobile.android\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eGoogle Play Store\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\u003c/li\u003e\n\u003cli\u003eUnited MileagePlus X iOS and Android Apps\n\n\u003cul\u003e\n\u003cli\u003eThe MileagePlus X iOS application can be downloaded from the \u003ca href=\"https://itunes.apple.com/us/app/mileageplus-x/id928624751\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eApple App Store\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eThe MileagePlus X Android application can be downloaded from the \u003ca href=\"https://play.google.com/store/apps/details?id=com.united.mpx.app\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eGoogle Play Store\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eFocus Areas:\u003c/h2\u003e\n\n\u003cul\u003e\n\u003cli\u003eRemote code execution\u003c/li\u003e\n\u003cli\u003eSQL injection\u003c/li\u003e\n\u003cli\u003eXXE\u003c/li\u003e\n\u003cli\u003eXSS\u003c/li\u003e\n\u003cli\u003eServer-side request forgery\u003c/li\u003e\n\u003cli\u003eDirectory traversal \n\n\u003cul\u003e\n\u003cli\u003elocal file inclusion\u003c/li\u003e\n\u003c/ul\u003e\u003c/li\u003e\n\u003cli\u003eAuthentication/authorization bypass \n\n\u003cul\u003e\n\u003cli\u003ebroken access control\u003c/li\u003e\n\u003c/ul\u003e\u003c/li\u003e\n\u003cli\u003ePrivilege escalation\u003c/li\u003e\n\u003cli\u003eInsecure direct object reference\u003c/li\u003e\n\u003cli\u003eMisconfiguration\u003c/li\u003e\n\u003cli\u003eWeb cache deception\u003c/li\u003e\n\u003cli\u003eCORS misconfiguration\u003c/li\u003e\n\u003cli\u003eCRLF injection\u003c/li\u003e\n\u003cli\u003eCross site request forgery\u003c/li\u003e\n\u003cli\u003eOpen redirect\u003c/li\u003e\n\u003cli\u003eInformation disclosure (limited to disclosures with valid credentials, regulatory significance, or bulk records)\u003c/li\u003e\n\u003cli\u003eRequest smuggling\u003c/li\u003e\n\u003cli\u003eMixed content\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eRewards:\u003c/h2\u003e\n\n\u003ctable\u003e\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003ePriority\u003c/th\u003e\n\u003cth\u003eTotal Miles\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003eP1\u003c/td\u003e\n\u003ctd\u003e2,000,000 miles\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eP2\u003c/td\u003e\n\u003ctd\u003e1,000,000 miles\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eP3\u003c/td\u003e\n\u003ctd\u003e500,000 miles\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eP4\u003c/td\u003e\n\u003ctd\u003e100,000 miles\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eP5\u003c/td\u003e\n\u003ctd\u003e0 miles\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\u003c/table\u003e\n\n\u003chr\u003e\n\n\u003cp\u003eBelow you can find the in-scope targets for the vulnerability disclosure program:\u003c/p\u003e","rewardRangeData":{},"recentChangeFlags":null},{"id":"9244485d-dab4-4c89-ade1-c640ee70f604","name":"Out of Scope Targets","targets":[{"id":"cde236d4-af59-4a4f-918c-8ad75b251809","uri":"","name":"mpdining.rewardsnetwork.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"fba47133-f63d-4729-bd65-609aca1f54f8","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"def0bc81-f04d-48cb-a65a-dfc00d1e4689","uri":"","name":"3rd party applications/services","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"b701f147-b368-4fe6-a3ed-2acf179f636c","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"def79a13-d95c-4a48-b26e-91e5e1346afd","uri":"","name":"hotels.united.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"cea8f986-f8e5-4091-997e-bbe4f74ddae3","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"fc811eec-7d5c-4e39-b768-cf9ee9f27670","uri":"","name":"vacations.united.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"d21a97c4-4655-45a9-a6f3-d4573f95fa45","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"f9d71994-b4aa-4f49-abd4-aae42cf0f313","uri":"","name":"cars.united.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"c6246fb6-5b80-4638-b6fd-cdc9b3c85490","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"8446fa28-4b68-4d62-9ed6-c780c263e591","uri":"","name":"newsroom.united.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"a6d2a544-85e1-4326-83d3-baf8a664b903","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"c73f30f0-eb8f-46a9-b402-ea14f9926d59","uri":"","name":"ir.united.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"a04cac75-7095-40ff-a47d-deca22e1c9c0","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"e19cd277-1235-4945-a5ff-08a8129e4ee3","uri":"","name":"hub.united.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"d14bec3c-86ac-4129-b9d2-a414be0e89aa","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"e8ecb9de-f023-4d22-9f2a-df4840e46a09","uri":"","name":"jobparters.united.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"a52ba780-1819-4189-bb78-507bdfb95c6d","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"ba059d18-46ea-43c2-aa05-249b1004e36b","uri":"","name":"careers.united.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"95c64382-334f-49af-9e07-faed9abab96d","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"85f1e46c-a08f-4b3f-b091-0860124423f9","uri":"","name":"opinions.united.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"4a5d91dc-b4a1-40fe-8b4e-5a26fcbe077a","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"fa7aa3b1-c6b5-4b58-8138-ac0df73764e1","uri":"","name":"globallinks.united.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"50d175a1-35e5-453e-9917-493da80fde68","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"39ff1a9f-9629-4b1b-97a4-004ee79ae7d5","uri":"","name":"dutyfree.united.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"fe8cf7c7-1aa3-49f6-ae50-971f6e489757","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"51dde83d-90d6-4815-8994-d9355a436c17","uri":"","name":"bigmetalbird.united.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"0190ef99-e393-4a14-bd32-804ec642a905","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"00834467-f2e7-41ec-af41-f0cd92340192","uri":"","name":"globalservices.united.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"4618fdc8-87d8-4e46-a501-a861db130631","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"23a2fa18-0da7-4588-adec-78dc491fb0e9","uri":"","name":"uatp.united.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"a1302ca8-46d9-4a2c-80cd-8348628e29be","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"ea1fce93-40c4-4ee5-82e5-f95371950f8c","uri":"","name":"brand.united.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"25621d5d-ffbd-4db5-874e-7a3ce2873076","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"3a5448e3-5735-48e0-b0d5-eb59bf2a1259","uri":"","name":"thanksamillion.united.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"a461f6fb-e5f1-4a60-b0d7-74d8c427be62","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"efffc6d9-f257-4a2e-ba86-b82146e2362f","uri":"","name":"*.unitedmileageplus.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"6c3ca3c9-463e-420a-b9a4-42fb0c88d048","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"c66df9e3-6923-4a34-97fd-90b2d93d454b","uri":"","name":"mystatus.united.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"e0e0ad6c-2caf-4e06-87ae-d7714f1c5ad8","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"f90056f2-da1b-44f1-9c77-7cf89bbbe004","uri":"","name":"newspaper-miles.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"583816e8-58e4-4c9f-a025-68bfb90a4e40","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"d710ae77-9630-42e9-a1aa-956876d920f4","uri":"","name":"*.mileageplus.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"c5f022b1-91d0-41f9-b71d-dad0a48f5885","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"9af86bdd-c57a-4854-a393-5dc63268d574","uri":"","name":"cruises.united.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"cb5c676e-bd59-4e48-a987-38d5b78cafe8","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"28a19a33-6269-4988-85dc-b01443de2b62","uri":"","name":"cardmemberoffers.united.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"edce07d1-0790-4ac7-8369-050b14c0b185","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"5db2e2ba-4be0-44fe-a6a5-373e70ebc6d0","uri":"","name":"ualmiles.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"c6008ad1-08e2-4e38-8b5e-5f1bb9883183","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"74e3976b-80ed-4557-b2d9-9cde337201d5","uri":"","name":"uma.united.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"dd22df92-8ec1-463f-99e9-96d936f42b70","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"e4e37e2c-0e5e-493b-a41a-c2a010140d95","uri":"","name":"unitedshop.summitmg.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"bd375439-239c-473f-9a1b-a2be7c5f4919","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"89a0004f-9b64-4ab7-b58f-84c46c25cf28","uri":"","name":"united-veterans.jobs","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"5fc21ab7-9645-46b2-9af5-e87e08ad0828","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"98ee4e97-fed4-4948-8de1-fc5b9b077d28","uri":"","name":"clubconferencerooms.united.com/unit","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"495b4094-4638-4965-b676-79ae3aa21502","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"9de6f313-d506-444c-b012-849dcc9c8e38","uri":"","name":"theexplorercard.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"b706e888-5cd6-4e0f-b12d-669c871e73df","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"e75be946-cc62-4e3d-aa41-3fe73e1fd638","uri":"","name":"mpclubcard.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"c0521e45-9716-4c28-835b-c3f047131114","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"4ee91f68-d724-4025-88df-1d9451ace429","uri":"","name":"myexplorercard.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"f235a399-5bc5-4447-ba8a-1cca51a4a96e","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"c0356ed3-8809-47da-874c-29aa4b359ffd","uri":"","name":"unitedexplorecard.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"943faeb8-82d1-4c90-9eb0-695e66c318ae","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"49fc8dd1-1dfa-418e-8ba5-2e9b79ebb5ad","uri":"","name":"unitedexplorer.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"73596f79-fb35-4636-bd72-430f65de2bc0","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"447bcef6-e3ce-445c-8e66-b7a071e1a80e","uri":"","name":"unitedexplorercard.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"257e8e2e-6282-429a-a128-c18de25162d4","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"5212deb8-5280-4a62-87e7-74dad7ab82c0","uri":"","name":"mileageplusawards.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"9ce57859-decd-4e43-a768-fb203d820494","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"0d2f34bb-4cf1-4b51-a8d1-aba0a24a06f3","uri":"","name":"Onboard Wi-Fi, entertainment systems or avionics","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"2bc2beda-3490-4356-b437-446406123e68","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"975b1070-65a3-4fdb-aa71-9d6cab74b727","uri":"","name":"m.mpdining.rewardsnetwork.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"45fad1e6-b491-4855-a644-e6e1fcbcc89c","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"d11e406c-ec15-41f9-a15f-822de26c7107","uri":"","name":"news.united.com/responsys","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"ea5fce29-54a1-4f92-9c32-337a8b1adb67","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"8e5a4726-4a5a-4755-abcb-7848a54cb8cf","uri":"","name":"survey.continental.com/vovici.net","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"58558d60-1c27-433f-b814-70bf0864bbb2","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"25f916c1-f047-4af5-8355-de560463c057","uri":"","name":"booking.unitedcargo.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"91a73aec-08a8-4089-a61e-80e6ea41aa18","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"b6b21420-c551-4aa2-b82b-79a424cee4b0","uri":"","name":"chargerback.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"56bfd69c-88bf-4a9a-8866-dd4d4280f974","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"4a3959b4-f7bf-41e3-b3e6-90bb2e298a7c","uri":"","name":"*.unitedvacationsdive.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"6377dc7c-5ae4-4831-a14b-ba860f204c3d","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"92c1c15f-3d4a-40ee-bd83-67c5b205f35a","uri":"","name":"packages.united.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"c31f8c82-79c9-49fb-a672-1561b03a0b98","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"5ea31d30-dfe7-4d9a-bcad-939143b16e91","uri":"https://bp.ual.com","name":"bp.ual.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"1087ad48-6c70-445b-937f-36999153db6c","sortOrder":47},"sortOrder":47,"tags":null,"recentChangeFlags":["entirely_new"]},{"id":"835f2573-b0aa-458f-927f-f8c225a201a9","uri":"https://mycargo.unitedcargo.com","name":"mycargo.unitedcargo.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"d2d1c453-072e-4e04-ba54-536d231344cf","sortOrder":48},"sortOrder":48,"tags":null,"recentChangeFlags":["entirely_new"]},{"id":"cbeb3e7f-3ea5-4fb1-9fef-0dbf1f0a8edb","uri":"","name":"chartercateringops.united.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"52d059f4-7386-4460-b4de-2de3cdd75c0a","sortOrder":57},"sortOrder":57,"tags":null,"recentChangeFlags":null},{"id":"667c2bb7-7cad-414a-bac7-28fe0aed2ba1","uri":"","name":"salesuat.united.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"941d2eac-4250-4e1f-9b4f-3efaab9d8ffe","sortOrder":58},"sortOrder":58,"tags":null,"recentChangeFlags":null},{"id":"b5dae6a0-ab54-4e03-b082-ff4fa5a20a19","uri":"","name":"chartersmanifest.united.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"8864de9a-40c2-468f-8744-a4d07b5d4674","sortOrder":59},"sortOrder":59,"tags":null,"recentChangeFlags":null}],"inScope":false,"sortOrder":2,"description":null,"rewardRange":null,"descriptionHtml":"\u003ch2\u003eOut-of-Scope Vulnerabilites:\u003c/h2\u003e\n\n\u003cul\u003e\n\u003cli\u003eSocial engineering, phishing\u003c/li\u003e\n\u003cli\u003ePhysical attacks\u003c/li\u003e\n\u003cli\u003eMissing cookie flags\u003c/li\u003e\n\u003cli\u003eCSRF with minimal impact i.e. login CSRF, logout CSRF, etc.\u003c/li\u003e\n\u003cli\u003eContent spoofing\u003c/li\u003e\n\u003cli\u003eStack traces, path disclosure, directory listings\u003c/li\u003e\n\u003cli\u003eSSL/TLS best practices\u003c/li\u003e\n\u003cli\u003eBanner grabbing\u003c/li\u003e\n\u003cli\u003eCSV injection\u003c/li\u003e\n\u003cli\u003eReflected file download\u003c/li\u003e\n\u003cli\u003eReports on out-of-date browsers\u003c/li\u003e\n\u003cli\u003eDOS/DDOS\u003c/li\u003e\n\u003cli\u003eHost header injection without a demonstrable impact\u003c/li\u003e\n\u003cli\u003eScanner Outputs\u003c/li\u003e\n\u003cli\u003eVulnerabilities on third-party products\u003c/li\u003e\n\u003cli\u003eUser enumeration\u003c/li\u003e\n\u003cli\u003ePassword complexity\u003c/li\u003e\n\u003cli\u003eHTTP trace method\u003c/li\u003e\n\u003cli\u003eDMARC\u003c/li\u003e\n\u003cli\u003eClickjacking\u003c/li\u003e\n\u003cli\u003eSPF record\u003c/li\u003e\n\u003cli\u003eInsufficient anti-automation\u003c/li\u003e\n\u003cli\u003eRate-limiting attacks\u003c/li\u003e\n\u003cli\u003eSelf-XSS\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003e\u003cem\u003eUnited uses a number of third-party providers and services – including a number hosted on subdomains of united.com that will be considered OOS for this program. We cannot authorize security testing against systems that do not belong to us but strongly suggest reporting issues identified within these services to the third-party directly. However, if you believe an issue with one of our third-party service providers is the result of United\u0026#39;s misconfiguration or insecure usage of that service (or you\u0026#39;ve reported an issue affecting many customers of the service that you believe United can temporarily mitigate without stopping usage of the service while a fix is implemented upstream), we\u0026#39;d appreciate your report regarding the issue but cannot guarantee any rewards or compensation.\u003c/em\u003e Additionally, the scope list is subject to change. The following targets are considered out-of-scope:\u003c/p\u003e","rewardRangeData":{},"recentChangeFlags":null}],"resources":[{"id":"cd433568-a993-42f8-aaef-09a0ca3c7276","attachmentPath":"https://bugcrowd.com/engagements/united-vdp/attachments/cd433568-a993-42f8-aaef-09a0ca3c7276","name":"W9.pdf","filename":"W9.pdf","description":null,"icon":"fileOther","size":119331,"sizeLabel":"117 KB","uploadedAt":"10 Sep 2024","fileType":"Document","embedUrl":"https://bugcrowd.com/engagements/united-vdp/attachments/cd433568-a993-42f8-aaef-09a0ca3c7276"},{"id":"f6a30717-ca29-4536-bddc-5e335c751411","attachmentPath":"https://bugcrowd.com/engagements/united-vdp/attachments/f6a30717-ca29-4536-bddc-5e335c751411","name":"United_VDP_Public_Key.txt","filename":"United_VDP_Public_Key.txt","description":null,"icon":"fileOther","size":3203,"sizeLabel":"3.13 KB","uploadedAt":"10 Sep 2024","fileType":"Document","embedUrl":"https://bugcrowd.com/engagements/united-vdp/attachments/f6a30717-ca29-4536-bddc-5e335c751411"},{"id":"6461468a-50c4-4bf6-a70c-0b40d9981b09","attachmentPath":"https://bugcrowd.com/engagements/united-vdp/attachments/6461468a-50c4-4bf6-a70c-0b40d9981b09","name":"W8BEN.pdf","filename":"W8BEN.pdf","description":null,"icon":"fileOther","size":68433,"sizeLabel":"66.8 KB","uploadedAt":"10 Sep 2024","fileType":"Document","embedUrl":"https://bugcrowd.com/engagements/united-vdp/attachments/6461468a-50c4-4bf6-a70c-0b40d9981b09"}],"engagement":{"id":"35de7af3-1258-4261-b2e8-6f9752ea75d9","code":"united-vdp","state":"in_progress","endsAt":null,"bountyId":"6f376915-939f-40df-a621-2e4175ac882d","startsAt":"2021-08-17T18:00:00Z"},"vrtScopeRules":[],"engagementConfiguration":{"participation":"open","crowdSelectionStrategy":"none"}},"industryName":"Transportation","methodologyName":null,"logoUrl":"https://logos.bugcrowdusercontent.com/logos/9745/58d1/56268aa5/099178ec6c9b1326470ae97f5fdfe0d5_unitedlogo.png","logoBackgroundColor":"#ffffff","displayDisclosureTerms":true,"coordinatedDisclosure":false,"collaborationEnabled":true,"participation":"open","rewardAllocation":"no_reward","engagementTypeDetail":{"iconVariant":"vdp","productLabel":"Vulnerability Disclosure","timeboxed":false},"pausedReason":null,"lastTransitionAt":"2021-08-17T18:00:00.000Z","cancellationReason":null,"statusLabel":"In progress","routesPaths":{"brief":"/engagements/united-vdp","changelogs":"/engagements/united-vdp/changelog","submissions":null,"announcements":"/engagements/united-vdp/announcements","hallOfFame":"/engagements/united-vdp/hall_of_fames","crowdstream":"/engagements/united-vdp/crowdstream"},"announcementsCount":6,"knownIssuesEnabled":false,"isDemo":false,"serviceLevel":"Platform","submitReportUrl":"/engagements/united-vdp/submissions/new","methodologyUrl":null,"progressPercentage":0,"badgeVariant":null,"userBannedFromEngagement":null,"isLoggedIn":false,"loginUrl":"/user/sign_in","scopedSubmissionsUrl":"/submissions?engagement%5B%5D=united-vdp\u0026sort%5B%5D=submitted-desc","isFollowing":null,"credentialsUrl":null,"toggleSubscriptionUrl":"/united-vdp/engagement_subscribers","engagementChangelogsUrl":"/engagements/united-vdp/changelog","publishedAt":"2026-09-23T20:54:32.725Z","engagementChangelogUrl":"/engagements/united-vdp/changelog/507b321c-25a9-4552-b8b8-ae7f20cabc02","createUserFeedbacksUrl":"/engagements/united-vdp/feedbacks","engagementCrowdstreamUrl":"/engagements/united-vdp/crowdstream","acceptedSubmissionsEnabled":true,"disclosedReportsEnabled":false,"engagementsUrl":"/engagements","engagementPaymentDetailUrl":null,"shouldShowHideButton":false,"engagementHiddenData":{},"totalRewardPool":null,"vrtScopeRules":{"data":[]},"vrtVersion":"1.19.1","isSubmissionPublishThrottled":false,"showIdVerificationAlert":false,"identityVerificationSettingsUrl":"https://bugcrowd.com/h/settings/identity_verification","identityUrl":null}