topic Re: I found a security bug on Aerohive Manager Dashboard, I sent a report to Aerohive Sec team security@aerohive.com. But 2 months ago, they have not replied to my email. in Aerohive Migrated Content

I found a security bug on Aerohive Manager Dashboard, I sent a report to Aerohive Sec team security@aerohive.com. But 2 months ago, they have not replied to my email.

tuatnh1 — Mon, 24 Feb 2020 12:38:26 GMT

I found a security bug on Aerohive Manager Dashboard, I sent a report to Aerohive Sec team security@aerohive.com. But 2 months ago, they have not replied to my email.

Re: I found a security bug on Aerohive Manager Dashboard, I sent a report to Aerohive Sec team security@aerohive.com. But 2 months ago, they have not replied to my email.

samantha_lynn — Tue, 25 Feb 2020 00:56:00 GMT

Thank you for letting me know. Could you forward me the email you sent so I can follow up for you? My email is communityhelp@aerohive.com.

Re: I found a security bug on Aerohive Manager Dashboard, I sent a report to Aerohive Sec team security@aerohive.com. But 2 months ago, they have not replied to my email.

tuatnh1 — Tue, 25 Feb 2020 10:38:07 GMT

Because I waited so long for the response, I sent a request for CVE id with cve.mitre.org.

Any problem ?

Re: I found a security bug on Aerohive Manager Dashboard, I sent a report to Aerohive Sec team security@aerohive.com. But 2 months ago, they have not replied to my email.

samantha_lynn — Tue, 25 Feb 2020 22:14:11 GMT

I'm sorry, I'm not sure what cve.mitre.org is. Could you forward me the email you sent to security@aerohive.com?

Re: I found a security bug on Aerohive Manager Dashboard, I sent a report to Aerohive Sec team security@aerohive.com. But 2 months ago, they have not replied to my email.

tuatnh1 — Wed, 26 Feb 2020 11:40:06 GMT

Please check your email.

Re: I found a security bug on Aerohive Manager Dashboard, I sent a report to Aerohive Sec team security@aerohive.com. But 2 months ago, they have not replied to my email.

samantha_lynn — Wed, 26 Feb 2020 22:15:25 GMT

Thank you, I see that email and I will inquire further for you on my end. I'll let you know as soon as I have more information, please don't hesitate to check in with me periodically if you haven't heard back.

Re: I found a security bug on Aerohive Manager Dashboard, I sent a report to Aerohive Sec team security@aerohive.com. But 2 months ago, they have not replied to my email.

samantha_lynn — Fri, 28 Feb 2020 03:12:22 GMT

Thank you for your patience, I have sent our security teams response to you via email.

Re: I found a security bug on Aerohive Manager Dashboard, I sent a report to Aerohive Sec team security@aerohive.com. But 2 months ago, they have not replied to my email.

tuatnh1 — Fri, 28 Feb 2020 10:45:32 GMT

Sound Good, Can you ask security team help me request CVE id for my report ?

Thanks for repply.

Re: I found a security bug on Aerohive Manager Dashboard, I sent a report to Aerohive Sec team security@aerohive.com. But 2 months ago, they have not replied to my email.

tuatnh1 — Mon, 02 Mar 2020 10:54:40 GMT

Hi,

Can help me ask your Security team How about "that is very unlikely to be practically exploitable" ?

Because in this case, I just need to search google who is using Aerohive products on Hive Manager to be able to execute "Reflect XSS" attacks.

If they answer this vulnerability is not valid, can I publish it on the internet?