1 Support questions or comments

• 
  1 week ago
  incibe

  Dear Multi-Purpose Inventory Management System team,
  
  We are writing to you from INCIBE, the Spanish National Cybersecurity Institute, about 1 vulnerability reported by an external researcher in one of your products.
  
  We participate in the CVE Program as CNA Root (https://www.cve.org/ProgramOrganization/Structure), which allows us to assign and publish CVE codes.
  
  Please note that this report is not an incident, i.e. no one is exploiting the vulnerability. INCIBE is in charge of managing the CVE report, documentation and publication, in coordination with the affected parties.
  
  As established in our disclosure policy, we have established by default a deadline of 60 days for you to take some kind of action for the resolution of this vulnerability, so we will start working on its publication from 12 of February.
  
  If you wish to include a fix or additional information for the issue reported in the advisory, please inform us before the due date.
  
  Since we cannot attach the vulnerabilitiy here, we ask you to write to us by mail at [email protected].
  
  Thank you very much and best regards,