[et_pb_section fb_built=\u00bb1″ custom_padding_last_edited=\u00bbon|desktop\u00bb admin_label=\u00bbHeader 2024″ _builder_version=\u00bb4.22.0″ _module_preset=\u00bbdefault\u00bb background_color=\u00bbrgba(193,204,220,0.25)\u00bb background_enable_image=\u00bboff\u00bb background_size=\u00bbcustom\u00bb background_image_width=\u00bb1280px\u00bb background_position=\u00bbbottom_center\u00bb max_width=\u00bb98%\u00bb module_alignment=\u00bbcenter\u00bb custom_margin=\u00bb0px||0px||true|false\u00bb custom_margin_tablet=\u00bb10px|10px|0px|10px|false|true\u00bb custom_margin_phone=\u00bb10px|10px|0px|10px|false|true\u00bb custom_margin_last_edited=\u00bbon|phone\u00bb custom_padding=\u00bb10px|20px|20px|20px|false|true\u00bb custom_padding_tablet=\u00bb10px|20px|0px|20px|false|true\u00bb custom_padding_phone=\u00bb10px|10px|0px|10px|false|true\u00bb background_last_edited=\u00bboff|desktop\u00bb background_size_tablet=\u00bbcontain\u00bb border_radii=\u00bbon|20px|20px|20px|20px\u00bb global_colors_info=\u00bb{}\u00bb background__hover_enabled=\u00bboff|desktop\u00bb][et_pb_row column_structure=\u00bb3_5,2_5″ use_custom_gutter=\u00bbon\u00bb gutter_width=\u00bb1″ make_equal=\u00bbon\u00bb custom_padding_last_edited=\u00bbon|phone\u00bb admin_label=\u00bbIntro\u00bb _builder_version=\u00bb4.22.0″ _module_preset=\u00bbdefault\u00bb width=\u00bb90%\u00bb width_tablet=\u00bb90%\u00bb width_phone=\u00bb100%\u00bb width_last_edited=\u00bbon|phone\u00bb max_width=\u00bb1280px\u00bb module_alignment=\u00bbcenter\u00bb custom_margin=\u00bb0px||0px||true|false\u00bb custom_padding=\u00bb0px||0px||true|false\u00bb custom_padding_tablet=\u00bb0px||0px||true|false\u00bb custom_padding_phone=\u00bb|0px||0px|true|true\u00bb global_colors_info=\u00bb{}\u00bb][et_pb_column type=\u00bb3_5″ _builder_version=\u00bb4.22.0″ _module_preset=\u00bbdefault\u00bb background_color=\u00bb#ffffff\u00bb background_enable_image=\u00bboff\u00bb custom_padding=\u00bb4%|4%|4%|4%|true|true\u00bb custom_padding_tablet=\u00bb4%|4%|4%|4%|true|true\u00bb custom_padding_phone=\u00bb20px|20px|20px|20px|true|true\u00bb custom_padding_last_edited=\u00bbon|phone\u00bb custom_css_main_element=\u00bbmargin-right:10px!important;\u00bb border_radii=\u00bbon|10px|10px|10px|10px\u00bb global_colors_info=\u00bb{}\u00bb][et_pb_text _builder_version=\u00bb4.22.0″ _module_preset=\u00bbdefault\u00bb header_font_size=\u00bb2em\u00bb module_alignment=\u00bbcenter\u00bb custom_margin=\u00bb0px||40px||false|false\u00bb custom_padding=\u00bb0px||0px||true|false\u00bb global_colors_info=\u00bb{}\u00bb]<\/p>\n
[\/et_pb_text][\/et_pb_column][et_pb_column type=\u00bb2_5″ disabled_on=\u00bboff|off|off\u00bb _builder_version=\u00bb4.22.0″ _module_preset=\u00bbdefault\u00bb background_enable_color=\u00bboff\u00bb background_image=\u00bbhttps:\/\/pandorafms.com\/wp-content\/uploads\/2024\/02\/politica-de-revelacion-de-vulnerabilidades.webp\u00bb custom_padding=\u00bb0px|0px|0px|0px|true|true\u00bb custom_css_main_element=\u00bbtop:0px;\u00bb border_radii=\u00bbon|10px|10px|10px|10px\u00bb global_colors_info=\u00bb{}\u00bb custom_css_main_element_last_edited=\u00bbon|tablet\u00bb custom_css_main_element_tablet=\u00bbtop:10px;\u00bb custom_css_main_element_phone=\u00bbtop:10px;\u00bb][et_pb_image src=\u00bbhttps:\/\/pandorafms.com\/wp-content\/uploads\/2024\/01\/Invisible-frame.png\u00bb alt=\u00bbPandora FMS\u00bb title_text=\u00bbPandora FMS\u00bb _builder_version=\u00bb4.22.0″ _module_preset=\u00bbdefault\u00bb background_enable_video_mp4=\u00bboff\u00bb background_enable_video_webm=\u00bboff\u00bb width=\u00bb40%\u00bb custom_margin=\u00bb0px|0px|0px|0px|false|false\u00bb custom_padding=\u00bb0px|0px|0px|0px|false|false\u00bb border_radii=\u00bbon|10px|10px|10px|10px\u00bb global_colors_info=\u00bb{}\u00bb][\/et_pb_image][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=\u00bb1_2,1_2″ use_custom_gutter=\u00bbon\u00bb gutter_width=\u00bb1″ make_equal=\u00bbon\u00bb custom_padding_last_edited=\u00bboff|tablet\u00bb admin_label=\u00bbtexto\u00bb _builder_version=\u00bb4.22.0″ _module_preset=\u00bbdefault\u00bb width=\u00bb90%\u00bb width_tablet=\u00bb90%\u00bb width_phone=\u00bb100%\u00bb width_last_edited=\u00bbon|phone\u00bb max_width=\u00bb1280px\u00bb module_alignment=\u00bbcenter\u00bb custom_margin=\u00bb0px||0px||true|false\u00bb custom_padding=\u00bb20px||0px||false|false\u00bb custom_padding_tablet=\u00bb40px||40px||true|false\u00bb custom_padding_phone=\u00bb|0px||0px|true|true\u00bb global_colors_info=\u00bb{}\u00bb custom_padding__hover_enabled=\u00bboff|desktop\u00bb][et_pb_column type=\u00bb1_2″ _builder_version=\u00bb4.22.0″ _module_preset=\u00bbdefault\u00bb background_color=\u00bb#ffffff\u00bb background_enable_image=\u00bboff\u00bb custom_padding=\u00bb4%|4%|4%|4%|true|true\u00bb custom_padding_tablet=\u00bb4%|4%|4%|4%|true|true\u00bb custom_padding_phone=\u00bb20px|20px|20px|20px|true|true\u00bb custom_padding_last_edited=\u00bbon|phone\u00bb custom_css_main_element=\u00bbmargin-right:10px!important;\u00bb border_radii=\u00bbon|10px|10px|10px|10px\u00bb global_colors_info=\u00bb{}\u00bb][et_pb_text _builder_version=\u00bb4.22.0″ _module_preset=\u00bbdefault\u00bb custom_margin=\u00bb0px||0px||true|false\u00bb custom_padding=\u00bb0px||0px||true|false\u00bb global_colors_info=\u00bb{}\u00bb]<\/p>\n
<\/p>\n
Recomendamos encarecidamente que nos informes a nosotros primero de las posibles vulnerabilidades de seguridad, antes de revelarlas en un foro p\u00fablico. La direcci\u00f3n de correo electr\u00f3nico principal para informar de cualquier vulnerabilidad o problema de seguridad es\u00a0security@pandorafms.com<\/a>. El uso de otras direcciones de contacto generales no proporcionar\u00e1 una gesti\u00f3n adecuada de los problemas de seguridad. Por lo que utiliza solo esta direcci\u00f3n para informar sobre una vulnerabilidad de seguridad no divulgada.<\/p>\n Ten en cuenta que los contactos de seguridad solo deben utilizarse para informar sobre vulnerabilidades de seguridad no reveladas en Pandora FMS y gestionar el proceso de reparaci\u00f3n de dichas vulnerabilidades. No podemos aceptar informes de errores comunes o preguntas sobre la arquitectura de seguridad en esta direcci\u00f3n. Se ignorar\u00e1 todo correo enviado a estas direcciones que no est\u00e9 relacionado con un problema de seguridad no revelado en Pandora FMS.<\/strong><\/p>\n Tambi\u00e9n ten en cuenta que el equipo de seguridad gestiona las vulnerabilidades en Pandora FMS, no brinda soporte, servicios de consultor\u00eda, implementaci\u00f3n, ni desarrolla funcionalidades personalizadas. Todos los informes de vulnerabilidades deben enviarse \u00fanicamente a\u00a0security@pandorafms.com<\/a>.<\/strong><\/p>\n Env\u00eda un correo electr\u00f3nico de texto sin formato por cada vulnerabilidad que quieras notificar. Es posible que te pidamos que vuelvas a enviar tu informe si lo env\u00edas como un archivo adjunto de imagen, v\u00eddeo, HTML o PDF cuando se podr\u00eda describir f\u00e1cilmente con texto sin formato. No env\u00edes un solo correo que contenga varios problemas a la vez.<\/p>\n Los env\u00edos cifrados no son obligatorios ni recomendados, ya que nos llevar\u00e1 mucho m\u00e1s tiempo responder a estos informes.<\/p>\n <\/p>\n La siguiente informaci\u00f3n ser\u00e1 \u00fatil para el equipo de seguridad de Pandora FMS:<\/p>\n <\/p>\n La informaci\u00f3n sobre las vulnerabilidades publicadas de Pandora FMS generalmente se puede encontrar en las notas de las actualizaciones mensuales. Si no puedes encontrar la informaci\u00f3n que buscas en el sitio web del proyecto, pregunta en los foros. Los contactos de seguridad no deben utilizarse para hacer preguntas sobre<\/strong>:<\/p>\n Nuestros foros p\u00fablicos son el lugar para hacer tales preguntas. Cualquier pregunta enviada al equipo de seguridad de Pandora FMS ser\u00e1 ignorada.<\/p>\n [\/et_pb_text][\/et_pb_column][et_pb_column type=\u00bb1_2″ _builder_version=\u00bb4.22.0″ _module_preset=\u00bbdefault\u00bb background_color=\u00bb#ffffff\u00bb background_enable_image=\u00bboff\u00bb custom_padding=\u00bb4%|4%|4%|4%|true|true\u00bb custom_padding_tablet=\u00bb4%|4%|4%|4%|true|true\u00bb custom_padding_phone=\u00bb20px|20px|20px|20px|true|true\u00bb custom_padding_last_edited=\u00bbon|phone\u00bb custom_css_main_element=\u00bbmargin-right:10px!important;\u00bb border_radii=\u00bbon|10px|10px|10px|10px\u00bb global_colors_info=\u00bb{}\u00bb][et_pb_text _builder_version=\u00bb4.22.0″ _module_preset=\u00bbdefault\u00bb custom_margin=\u00bb0px||0px||true|false\u00bb custom_padding=\u00bb0px||0px||true|false\u00bb global_colors_info=\u00bb{}\u00bb]<\/p>\n <\/p>\n El proceso general para gestionar una nueva vulnerabilidad de seguridad es el siguiente.<\/p>\n Nota: No se debe hacer p\u00fablica informaci\u00f3n sobre la vulnerabilidad hasta que no se anuncie formalmente al final de este proceso. Eso significa, por ejemplo, que NO se debe crear un ticket en Github para rastrear el problema, ya que lo har\u00e1 p\u00fablico. Adem\u00e1s, los mensajes asociados con cualquier commit no deben hacer NINGUNA referencia a la naturaleza de seguridad del commit.<\/i><\/strong><\/p>\n La informaci\u00f3n se puede compartir con expertos en la materia (por ejemplo, compa\u00f1eros de trabajo) a discreci\u00f3n del equipo de seguridad del proyecto, siempre que quede claro que la informaci\u00f3n no es para divulgaci\u00f3n p\u00fablica y que\u00a0security@pandorafms.com<\/a>\u00a0debe dejarse en copia en cualquier comunicaci\u00f3n relacionada con la vulnerabilidad.<\/p>\n [\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section]<\/p>\n","protected":false},"excerpt":{"rendered":" POL\u00cdTICA DE REVELACI\u00d3N DE VULNERABILIDADES Facilitamos la gesti\u00f3n de las vulnerabilidades de seguridadInformar de una vulnerabilidad Recomendamos encarecidamente que nos informes a nosotros primero de las posibles vulnerabilidades de seguridad, antes de revelarlas en un foro p\u00fablico. La direcci\u00f3n de correo electr\u00f3nico principal para informar de cualquier vulnerabilidad o problema de seguridad es\u00a0security@pandorafms.com. El […]<\/p>\n","protected":false},"author":33,"featured_media":0,"parent":303186,"menu_order":3,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_et_pb_use_builder":"on","_et_pb_old_content":"[et_pb_section fb_built=\"1\" admin_label=\"Banner\" _builder_version=\"4.11.4\" _module_preset=\"default\" background_color=\"#0c3936\" use_background_color_gradient=\"on\" background_color_gradient_start=\"rgba(5,32,31,0.8)\" background_color_gradient_end=\"rgba(0,0,0,0.9)\" background_color_gradient_overlays_image=\"on\" background_image=\"https:\/\/pandorafms.com\/wp-content\/uploads\/2021\/11\/pandorafms-security-disclosure-policy.jpg\" background_enable_video_mp4=\"off\" background_video_pause_outside_viewport=\"off\" custom_margin=\"0px|0px|0px|0px|true|true\" custom_padding=\"80px|0px|0px|0px|false|true\" animation_direction=\"top\" hover_enabled=\"0\" locked=\"off\" global_colors_info=\"{}\" alt=\"Pandora FMS Disclosure policy\" title_text=\"Pandora FMS Disclosure policy\" sticky_enabled=\"0\"][et_pb_row admin_label=\"Texto\" _builder_version=\"4.11.4\" _module_preset=\"default\" width=\"100%\" max_width=\"800px\" module_alignment=\"center\" custom_margin=\"0px||0px||true|false\" custom_padding=\"0px||0px||true|false\" global_colors_info=\"{}\"][et_pb_column type=\"4_4\" _builder_version=\"4.7.1\" _module_preset=\"default\" global_colors_info=\"{}\"][et_pb_text _builder_version=\"4.11.4\" _module_preset=\"default\" text_orientation=\"center\" custom_margin=\"0px||0px||true|false\" custom_padding=\"0px||0px||true|false\" hover_enabled=\"0\" global_colors_info=\"{}\" sticky_enabled=\"0\"]\r\n Providing coordination of the handling of security vulnerabilities<\/p>\r\n[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=\"1_2,1_2\" admin_label=\"Bits\" module_class=\"dos-col\" _builder_version=\"4.11.4\" _module_preset=\"default\" width=\"100%\" max_width=\"100%\" custom_margin=\"15px||0px||false|false\" custom_margin_tablet=\"30px||-30px||false|false\" custom_margin_phone=\"||-30px||false|false\" custom_margin_last_edited=\"on|phone\" custom_padding=\"0px||0px||true|false\" custom_css_main_element=\"display:flex;\" saved_tabs=\"all\" global_colors_info=\"{}\"][et_pb_column type=\"1_2\" _builder_version=\"4.7.1\" _module_preset=\"default\" global_colors_info=\"{}\"][et_pb_image src=\"https:\/\/pandorafms.com\/wp-content\/uploads\/2021\/10\/data1.png\" alt=\"Data Pandora\" title_text=\"Data Pandora\" _builder_version=\"4.7.1\" _module_preset=\"default\" global_colors_info=\"{}\"][\/et_pb_image][\/et_pb_column][et_pb_column type=\"1_2\" _builder_version=\"4.7.1\" _module_preset=\"default\" global_colors_info=\"{}\"][et_pb_image src=\"https:\/\/pandorafms.com\/wp-content\/uploads\/2021\/10\/data2.png\" alt=\"Data Pandora\" title_text=\"Data Pandora\" align=\"right\" _builder_version=\"4.7.1\" _module_preset=\"default\" custom_margin=\"0px||0px||true|false\" custom_padding=\"0px||0px||true|false\" global_colors_info=\"{}\"][\/et_pb_image][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=\"1\" _builder_version=\"4.11.4\" _module_preset=\"default\" custom_margin=\"0px||0px||true|false\" custom_padding=\"70px||70px||true|false\" hover_enabled=\"0\" sticky_enabled=\"0\"][et_pb_row _builder_version=\"4.11.4\" _module_preset=\"default\" custom_margin=\"0px||0px||true|false\" custom_padding=\"0px||0px||true|false\" hover_enabled=\"0\" sticky_enabled=\"0\" max_width=\"900px\"][et_pb_column _builder_version=\"4.11.4\" _module_preset=\"default\" type=\"4_4\"][et_pb_text _builder_version=\"4.11.4\" _module_preset=\"default\" hover_enabled=\"0\" global_colors_info=\"{}\" custom_margin=\"0px||0px||true|false\" custom_padding=\"0px||0px||true|false\" sticky_enabled=\"0\"]\r\n
\n\u00bfC\u00f3mo informar de un problema de seguridad?<\/h3>\n
\n
\nInformaci\u00f3n sobre la vulnerabilidad<\/h3>\n
\n
Gesti\u00f3n de vulnerabilidades<\/h3>\n
\n
Pandora FMS disclosure policy<\/h1>\r\n
Reporting a vulnerability<\/h2>\r\nWe strongly encourage the reporting of potential security vulnerabilities to us first, before disclosing them in a public forum.\r\n\r\nThe main email address to report any vulnerability or security issue is security@pandorafms.com<\/b><\/a>. Usage of other general-purpose addresses of contact will not render a proper management of security issues, please use this address for\u00a0 undisclosed security vulnerability to report.\r\n\r\nPlease note that the security contacts should only be used for reporting undisclosed security vulnerabilities in Pandora FMS\u00a0 and managing the process of fixing such vulnerabilities.<\/b> We cannot accept regular bug reports or questions about security architecture at this addresses. All mail sent to these addresses that does not relate to an undisclosed security problem in Pandora FMS will be ignored.\r\n\r\nAlso note that the security team handles vulnerabilities in Pandora FMS, not provide support, consulting services, deployment or develop custom features. All reports of vulnerabilities should be sent to security@pandorafms.com only.<\/b>\r\n\r\nPlease send one plain-text email for each vulnerability you are reporting. We may ask you to resubmit your report if you send it as an image, movie, HTML, or PDF attachment when it could just as easily be described with plain text. Please do not send a single mail containing several issues at once.\r\n\r\nEncrypted submissions are not required or preferred as it will take us much longer to respond to these reports.\r\n\r\n
\r\n\r\nHow to report a security issue?<\/h2>\r\nThe following information will be helpful for Pandora FMS Security team:\r\n
\r\n \t
\r\n\r\nVulnerability information<\/h2>\r\nInformation on the published vulnerabilities for Pandora FMS can usually be found on the release notes. If you can't find the information you are looking for on the project's web site, you should ask your question on the forums. The security contacts should not be used to ask questions about<\/b>\r\n
\r\n \t
\r\n\r\nVulnerability handling<\/h2>\r\nA typical process for handling a new security vulnerability is as follows:\r\n\r\nNote: No information should be made public about the vulnerability until it is formally announced at the end of this process. That means, for example that a Github issue must NOT be created to track the issue since that will make the issue public. Also the messages associated with any commits should not make ANY reference to the security nature of the commit.<\/i><\/b>\r\n\r\n1- The person discovering the issue, the reporter, reports the vulnerability privately to security@pandorafms.com.\r\n\r\n2- Messages that do not relate to the reporting or managing of an undisclosed security vulnerability in Pandora FMS are ignored and no further action is required.\r\n\r\n3- If reported to security@pandorafms.com, the security team will forward the report (without acknowledging it) to other members of the security team.\r\n\r\n4- The project team sends an e-mail to the original reporter to acknowledge the report.\r\n\r\n5- The project team investigates the report and either rejects it or accepts it.\r\n\r\n6- If the report is rejected, the project team writes to the reporter to explain why.\r\n\r\n7- If the report is accepted, the project team writes a report to let them know it is accepted and that they are working on a fix.\r\n\r\n8- The security team will assign an internal security case number and one or more development tickets assigned to the security case number.\r\n\r\n9- The security team will ask the reporter for a CVE number.\r\n\r\n10- The project team provides the reporter with a copy of the fix and a draft vulnerability announcement for comment.\r\n\r\n11- The security team agrees with the fix, the announcement and the release schedule with the reporter. The level of detail to include in the report is a matter of judgement. Generally, reports should contain enough information to enable people to assess the risk associated with the vulnerability for their system and no more.\r\n\r\n12- Steps to reproduce the vulnerability are not normally included.\r\n\r\n13- The project team commits the fix and includes it in a release.\r\n\r\n14- The project team announces the release. The release announcement should be sent to the usual channels (newsletter, forums, website).\r\n\r\n15- Clients with valid support agreements are emailed giving a period of time when it is possible to upgrade before the issue becomes known to the public.\r\n\r\n16- The project team announces the vulnerability to the public (including CVE update). The vulnerability announcement should be sent AFTER the release announcement. Most times the public notice is at least ONE MONTH later the release of the fix, to give enough time to users and customers to update the software.\r\n\r\nInformation may be shared with domain experts (e.g. colleagues at your employer) at the discretion of the project's security team providing that it is made clear that the information is not for public disclosure and that security@pandorafms.com must be copied on any communication regarding the vulnerability.[\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section]","_et_gb_content_width":"","_joinchat":[],"footnotes":""},"class_list":["post-303219","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/pandorafms.com\/es\/wp-json\/wp\/v2\/pages\/303219","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pandorafms.com\/es\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/pandorafms.com\/es\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/pandorafms.com\/es\/wp-json\/wp\/v2\/users\/33"}],"replies":[{"embeddable":true,"href":"https:\/\/pandorafms.com\/es\/wp-json\/wp\/v2\/comments?post=303219"}],"version-history":[{"count":8,"href":"https:\/\/pandorafms.com\/es\/wp-json\/wp\/v2\/pages\/303219\/revisions"}],"predecessor-version":[{"id":382587,"href":"https:\/\/pandorafms.com\/es\/wp-json\/wp\/v2\/pages\/303219\/revisions\/382587"}],"up":[{"embeddable":true,"href":"https:\/\/pandorafms.com\/es\/wp-json\/wp\/v2\/pages\/303186"}],"wp:attachment":[{"href":"https:\/\/pandorafms.com\/es\/wp-json\/wp\/v2\/media?parent=303219"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}