3DS OUTSCALE

{
  "id": "outscale",
  "name": "3DS OUTSCALE",
  "public": true,
  "disabled": false,
  "managed": null,
  "min_bounty": 50,
  "max_bounty": 5000,
  "targets": {
    "in_scope": [
      {
        "target": "https://cockpit-eu-west-2.outscale.com/",
        "type": "web-application"
      },
      {
        "target": "https://fcu.eu-west-2.outscale.com",
        "type": "api"
      },
      {
        "target": "https://lbu.eu-west-2.outscale.com",
        "type": "api"
      },
      {
        "target": "https://osu.eu-west-2.outscale.com",
        "type": "api"
      },
      {
        "target": "https://eim.eu-west-2.outscale.com",
        "type": "api"
      },
      {
        "target": "https://directlink.eu-west-2.outscale.com",
        "type": "api"
      },
      {
        "target": "Any resource created or accessed with the Outscale Cloud on eu-west-2 region -  created by the Hunter",
        "type": "other"
      }
    ],
    "out_of_scope": [
      {
        "target": "Any resource created or accessed with the Outscale Cloud, on all regions - except the ones created by the Hunter",
        "type": "other"
      },
      {
        "target": "Other subdomains on outscale.com (wiki.outscale.net, fr.outscale.com, en.outscale.com... )",
        "type": "other"
      },
      {
        "target": "Social engineering of Outscale employees and contractors",
        "type": "other"
      },
      {
        "target": "Attack against Outscale offices (malware, backdoor, DoS, etc.)",
        "type": "other"
      },
      {
        "target": "Denial of service attacks",
        "type": "other"
      },
      {
        "target": "Vulnerabilities on products or services other than Cockpit or APIs",
        "type": "other"
      },
      {
        "target": "Issues in our DNS and NTP",
        "type": "other"
      },
      {
        "target": "Issues not leading to confidentiality, traceability or integrity problems. You can report it to support@outscale.com.",
        "type": "other"
      },
      {
        "target": "Same behavior as Amazon Web Services",
        "type": "other"
      },
      {
        "target": "E-mail server configuration (DKIM/SPF/DMARC)",
        "type": "other"
      },
      {
        "target": "Dataleaks or 3DS OUTSCALE-related vulnerabilities outside the scope of the IaaS Cloud Service.",
        "type": "other"
      }
    ]
  }
}