3DS OUTSCALE

In Scope

• https://cockpit-eu-west-2.outscale.com/ web bounty-eligible
• https://fcu.eu-west-2.outscale.com api bounty-eligible
• https://lbu.eu-west-2.outscale.com api bounty-eligible
• https://osu.eu-west-2.outscale.com api bounty-eligible
• https://eim.eu-west-2.outscale.com api bounty-eligible
• https://directlink.eu-west-2.outscale.com api bounty-eligible
• Any resource created or accessed with the Outscale Cloud on eu-west-2 region - created by the Hunter other bounty-eligible

Out of Scope

Any resource created or accessed with the Outscale Cloud, on all regions - except the ones created by the Hunter, Other subdomains on outscale.com (wiki.outscale.net, fr.outscale.com, en.outscale.com... ), Social engineering of Outscale employees and contractors, Attack against Outscale offices (malware, backdoor, DoS, etc.), Denial of service attacks, Vulnerabilities on products or services other than Cockpit or APIs, Issues in our DNS and NTP, Issues not leading to confidentiality, traceability or integrity problems. You can report it to [email protected]., Same behavior as Amazon Web Services, E-mail server configuration (DKIM/SPF/DMARC), Dataleaks or 3DS OUTSCALE-related vulnerabilities outside the scope of the IaaS Cloud Service.