Skip to main content
K
KU_103342401-Visitor
1-Visitor
June 7, 2022
Question

Vulnerability Disclosure Email address cvd@ptc.com doesn't work

  • June 7, 2022
  • 2 replies
  • 2014 views

When I try to submit a vulnerability report following the instructions at https://www.ptc.com/en/documents/security/coordinated-vulnerability-disclosure, sending an email to cvd@ptc.com, I'm getting a reply from postmaster@ptc.com saying only senders of the same organization are allowed to use the cvd@ptc.com email address (see attached screenshot). What am I supposed to do to submit my report? Thanks.

 

PS: I don't think "Quality Mgmt" is the right label for this topic but there wasn't any other fitting better.

2 replies

T
23-Emerald IV
TomU23-Emerald IV
23-Emerald IV
June 7, 2022

Probably here:  https://support.ptc.com/apps/business_support/auth/ssl/assistant

K
KU_103342401-VisitorAuthor
1-Visitor
June 7, 2022

Thank you for the hint but I'm a security researcher and my client is using windchill. I'm not a customer and do not have the required privilege level (actually I registered as a student).

T
23-Emerald IV
TomU23-Emerald IV
23-Emerald IV
June 7, 2022

I submitted something.  I'll let you know what they say.

T
23-Emerald IV
TomU23-Emerald IV
23-Emerald IV
June 9, 2022

@KU_10334240,

According to tech support this has been fixed and cvd@ptc.com will now accept email from external addresses.  Please try to resubmit your vulnerability report and let me know if it doesn't work.  Thanks.

    K
    KU_103342401-VisitorAuthor
    1-Visitor
    June 10, 2022

    Many thanks! At least I haven't received any error message yet. Thanks for your contribution to software security.

      Terms & ConditionsCookie settingsAccessibility statement