BMW Group

{
  "id": "61e0e37c-19cc-4abe-af51-108a78bee995",
  "url": "https://www.intigriti.com/programs/bmw/bmwgroup/detail",
  "name": "BMW Group",
  "handle": "bmwgroup",
  "status": "open",
  "targets": {
    "in_scope": [
      {
        "type": "url",
        "impact": "Tier 1",
        "endpoint": "www.bmw-motorrad.de",
        "description": null
      },
      {
        "type": "url",
        "impact": "Tier 1",
        "endpoint": "www.bmw.de",
        "description": null
      },
      {
        "type": "url",
        "impact": "Tier 1",
        "endpoint": "www.mini.de",
        "description": null
      },
      {
        "type": "url",
        "impact": "Tier 2",
        "endpoint": "configure.bmw.de",
        "description": null
      },
      {
        "type": "url",
        "impact": "Tier 2",
        "endpoint": "configure.mini.de",
        "description": null
      },
      {
        "type": "url",
        "impact": "Tier 2",
        "endpoint": "konfigurator.bmw-motorrad.de",
        "description": null
      },
      {
        "type": "other",
        "impact": "No Bounty",
        "endpoint": "Other BMW Domains",
        "description": "Please select this asset to report vulnerabilities affecting BMW assets but not matching any of the assets stated above.\n\n**Important:** Note our policy regarding \"No Bounty Domains\" and a potentially deviating application of the **safe harbor clause**.\nWe may award a small bonus for these assets, but only valid high, critical and exceptional severity findings - this is however, at the discretion of the BMW Group team."
      }
    ],
    "out_of_scope": [
      {
        "type": "other",
        "impact": "Out of scope",
        "endpoint": "Automotive Security",
        "description": "Please submit valid findings regarding Automotive assets in our public [BMW Group - Automotive program](https://app.intigriti.com/programs/bmw/bmwgroup-automotive)."
      },
      {
        "type": "other",
        "impact": "Out of scope",
        "endpoint": "Domains from independent BMW Dealers, Resellers or Fanclubs",
        "description": "These domains belong to legally independent entities. We can only inform these entities. However, we have no influence on the mitigation process of the vulnerabilities in these assets."
      }
    ]
  },
  "max_bounty": {
    "value": 6000,
    "currency": "EUR"
  },
  "min_bounty": {
    "value": 150,
    "currency": "EUR"
  },
  "tacRequired": false,
  "company_handle": "bmw",
  "twoFactorRequired": false,
  "confidentiality_level": "public"
}