STAGE 3 . DEFINITION OF ACTIONS AND SOLUTION

Walvoil will proceed with defining, planning and deploying a resolution plan: activities may include the development of patches and updates or the optimisationof configurations.

The implementation of the aforementioned plan will follow an order of priority determined on the basis of the level of severity, impact and consequences assessed in the previous analysis.

Please note that, for phase-out products, Walvoil will only be able to provide recommendations, as it is not possible to offer corrective solutions.

LEGAL NOTICE / SECURITY POLICY

During the process, the following requirements must be met:

• Comply with applicable laws and regulations
• Do not exploit or take advantage of vulnerabilities beyond what is strictly necessary
• Conduct product testing without causing any adverse impact on customers and members of the public, or obtain their explicit consent in advance
• Do not use invasive scanning tools
• Take proper measures to prevent any potential adverse impact on the security or privacy of users
• Do not access unnecessary and sensitive data
• Do not modify data stored in Walvoil’ssystems
• Securely delete all data retrieved in connection with the vulnerability report as soon as it is no longer necessary
• Comply with the principle of coordinated disclosure, undertaking not to make the vulnerability public or share it with third parties before the expiry of the mutually agreed timeframe.

Walvoil reserves the right to take legal action in the event of non-compliance.

THANKS SECTION

Walvoil would like to thank all the people, organizations and companies that, at their own discretion, reported and provided remediation to one or more vulnerabilities concerning our products.

Walvoil does not provide any monetary compensation (e.g. Bounty Bug) for vulnerability reports, in compliance with its Coordinated Vulnerability Disclosure (CVD) process.