{"id":8050,"date":"2026-04-30T13:01:03","date_gmt":"2026-04-30T10:01:03","guid":{"rendered":"https:\/\/www.withsecure.com\/about-us\/vulnerability-reward-program\/"},"modified":"2026-09-22T14:55:23","modified_gmt":"2026-09-22T11:55:23","slug":"vulnerability-reward-program","status":"publish","type":"page","link":"https:\/\/www.withsecure.com\/fr\/a-propos-de-nous\/vulnerability-reward-program\/","title":{"rendered":"Vulnerability reward program"},"content":{"rendered":"<section\n    class=\"wp-block-one-column-block edwp-block js-wp-block-one-column-block wp-block-one-column-block--content-1 layout--spacing-xxxxl-top layout--spacing-xl-bottom\"\n    >\n    <div class=\"wp-block-one-column-block__container\">\n                                                                                                                            <div class=\"wp-component-content wp-component-content--default wp-block-one-column-block__content fade-in\">\n            <h1 class=\"wp-component-heading text--h2 wp-component-content__title\">\n    Programme de r\u00e9compense pour la d\u00e9couverte <span class=\"blue-text\">de vuln\u00e9rabilit\u00e9s.<\/span><\/h1>                <\/div>                                                                                <\/div>\n<\/section>\n\n\n<section\n    class=\"wp-block-one-column-block edwp-block js-wp-block-one-column-block wp-block-one-column-block--content-1 layout--spacing-xxxl-bottom\"\n    >\n    <div class=\"wp-block-one-column-block__container\">\n                                                                                                                                    <div class=\"wp-component-image__wrapper wp-block-one-column-block__image fade-in\">\n                    <figure class=\"wp-component-image__figure\">\n                                            <img loading=\"lazy\" decoding=\"async\" width=\"1600\" height=\"637\" src=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/Frame-117.jpg.webp\" class=\"wp-component-image\n                            wp-component-image--desktop\n                            wp-component-image--mobile\n                            wp-component-image--ratio-content-25-1 wp-component-image--fit-cover\" alt=\"\" srcset=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/Frame-117.jpg.webp 1600w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/Frame-117-300x119.jpg.webp 300w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/Frame-117-1024x408.jpg.webp 1024w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/Frame-117-768x306.jpg.webp 768w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/Frame-117-1536x612.jpg.webp 1536w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/Frame-117-447x178.jpg.webp 447w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/05\/Frame-117-367x146.jpg.webp 367w\" sizes=\"auto, (max-width: 1600px) 100vw, 1600px\" \/>                                                    <\/figure>\n                    <\/div>\n                                                                                <\/div>\n<\/section>\n\n\n<section\n    class=\"wp-block-two-column-block edwp-block js-wp-block-two-column-block wp-block-two-column-block--content-1 wp-block-two-column-block__left--align-y-top wp-block-two-column-block__right--align-y-top wp-block-two-column-block--split-50-50 layout--none-top layout--spacing-xs-bottom\"\n    data-block-id=\"block_b3cc0d89a872db09c158000a08989fdb\"\n    >\n    <div class=\"wp-block-two-column-block__container row-load\">\n                                                        <div class=\"wp-block-two-column-block__left\">\n                                <h2 class=\"wp-component-heading text--h2 wp-block-two-column-block__heading \">\n    Signalez des vuln\u00e9rabilit\u00e9s. <span class=\"blue-text\">Soyez r\u00e9compens\u00e9 pour renforcer la s\u00e9curit\u00e9.<\/span><\/h2>                <\/div>\n                                                <div class=\"wp-block-two-column-block__right\">\n                                <div class=\"wp-component-paragraph wp-block-two-column-block__paragraph \">\n    <p>WithSecure r\u00e9compense les chercheurs en s\u00e9curit\u00e9 qui divulguent de mani\u00e8re responsable des vuln\u00e9rabilit\u00e9s de s\u00e9curit\u00e9 dans les produits et services WithSecure Elements \u00e9ligibles r\u00e9pertori\u00e9s ci-dessous \u2013 \u00e9galement appel\u00e9 programme de \u00ab bug bounty \u00bb. Si vous avez d\u00e9couvert un probl\u00e8me de s\u00e9curit\u00e9, nous souhaitons en \u00eatre inform\u00e9s. Lisez ces directives dans leur int\u00e9gralit\u00e9 avant de participer.<\/p>\n<\/div>\n                <\/div>\n                        <\/div>\n<\/section>\n\n\n<section\n    class=\"wp-block-two-column-block edwp-block js-wp-block-two-column-block wp-block-two-column-block--content-1 wp-block-two-column-block__left--align-y-top wp-block-two-column-block__right--align-y-top wp-block-two-column-block--split-sidebar layout--spacing-xxxl-top layout--spacing-xxxl-bottom\"\n    data-block-id=\"block_238a1dae81d50cdd354810fe48bd27cc\"\n    >\n    <div class=\"wp-block-two-column-block__container row-load\">\n                                                        <div class=\"wp-block-two-column-block__left\">\n                                <nav\n    class=\"wp-component-content-navigation wp-block-two-column-block__content-nav js-content-navigation\"\n    data-bem-base=\"wp-component-content-navigation\"\n    data-nav-column=\"left\"\n    data-nav-type=\"auto\"\n>\n    \n    <div class=\"wp-component-content-navigation__mobile\">\n        <label class=\"wp-component-content-navigation__mobile-label\">\n            <span class=\"wp-component-content-navigation__mobile-label-text\">\n                Navigation dans le contenu            <\/span>\n            <select class=\"wp-component-content-navigation__select js-content-navigation-select\">\n                <option value=\"\">\n                    S\u00e9lectionnez une section                <\/option>\n                            <\/select>\n        <\/label>\n    <\/div>\n\n    <div class=\"wp-component-content-navigation__desktop\">\n        <div class=\"wp-component-content-navigation__list-wrapper\">\n            <span\n                class=\"wp-component-content-navigation__indicator js-content-navigation-indicator\"\n                aria-hidden=\"true\"\n            ><\/span>\n            <ul class=\"wp-component-content-navigation__list js-content-navigation-list\">\n                            <\/ul>\n        <\/div>\n    <\/div>\n<\/nav>\n                <\/div>\n                                                <div class=\"wp-block-two-column-block__right\">\n                                <div class=\"wp-component-paragraph wp-block-two-column-block__paragraph \">\n    <h2 aria-level=\"2\"><b><span data-contrast=\"none\">Ce que vous devez savoir avant de commencer<\/span><\/b><span data-ccp-props=\"{&quot;335559738&quot;:200,&quot;335559739&quot;:120}\">\u00a0<\/span><\/h2>\n<p><span data-contrast=\"none\">Nous souhaitons \u00eatre inform\u00e9s des vuln\u00e9rabilit\u00e9s de s\u00e9curit\u00e9 pr\u00e9sentes dans les produits et services WithSecure Elements \u00e9ligibles r\u00e9pertori\u00e9s ci-dessous. Nous offrons des r\u00e9compenses financi\u00e8res pour les signalements \u00e9ligibles qui nous sont divulgu\u00e9s de mani\u00e8re coordonn\u00e9e.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:300}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"none\">Certaines r\u00e8gles doivent \u00eatre respect\u00e9es afin de garantir que vos recherches ne mettent pas en danger d&rsquo;autres utilisateurs, leurs donn\u00e9es ou nos services, et afin de r\u00e9duire le risque que notre syst\u00e8me de surveillance identifie vos recherches comme une tentative d&rsquo;intrusion malveillante. Nous tenons \u00e9galement \u00e0 \u00eatre clairs sur la mani\u00e8re dont nous acceptons les signalements et versons les r\u00e9compenses.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:300}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"none\">Une \u00ab vuln\u00e9rabilit\u00e9 de s\u00e9curit\u00e9 \u00bb est un probl\u00e8me qui entra\u00eene une atteinte \u00e0 la confidentialit\u00e9, \u00e0 l&rsquo;int\u00e9grit\u00e9 ou \u00e0 la disponibilit\u00e9 d&rsquo;un service ou de donn\u00e9es, ou qui entra\u00eene le stockage ou le traitement de donn\u00e9es personnelles (informations permettant d&rsquo;identifier une personne) d&rsquo;une mani\u00e8re non conforme \u00e0 la l\u00e9gislation finlandaise en vigueur en mati\u00e8re de protection des donn\u00e9es.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:300}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"none\">Le programme de r\u00e9compense pour la d\u00e9couverte de vuln\u00e9rabilit\u00e9s couvre actuellement uniquement les produits WithSecure Elements suivants et leurs services cloud Elements associ\u00e9s :<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:300}\">\u00a0<\/span><\/p>\n<ul>\n<li><span data-contrast=\"none\">WithSecure Elements EPP for Computers (Windows et Mac)<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:100,&quot;335559740&quot;:300}\">\u00a0<\/span><\/li>\n<li><span data-contrast=\"none\">WithSecure Elements EPP for Computers Premium (Windows)<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:100,&quot;335559740&quot;:300}\">\u00a0<\/span><\/li>\n<li><span data-contrast=\"none\">WithSecure Elements EPP for Servers (Windows et Linux)<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:100,&quot;335559740&quot;:300}\">\u00a0<\/span><\/li>\n<li><span data-contrast=\"none\">WithSecure Elements EDR for Servers (Windows et Linux)<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:100,&quot;335559740&quot;:300}\">\u00a0<\/span><\/li>\n<li><span data-contrast=\"none\">WithSecure Elements EPP for Servers Premium (Windows et Linux)<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:100,&quot;335559740&quot;:300}\">\u00a0<\/span><\/li>\n<li><span data-contrast=\"none\">WithSecure Elements EDR for Computers (Windows et Mac)<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:100,&quot;335559740&quot;:300}\">\u00a0<\/span><\/li>\n<li><span data-contrast=\"none\">WithSecure Elements EDR and EPP for Computers (Windows et Mac)<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:100,&quot;335559740&quot;:300}\">\u00a0<\/span><\/li>\n<li><span data-contrast=\"none\">WithSecure Elements EDR and EPP for Computers Premium (Windows)<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:100,&quot;335559740&quot;:300}\">\u00a0<\/span><\/li>\n<li><span data-contrast=\"none\">WithSecure Elements EDR and EPP for Servers (Windows et Linux)<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:100,&quot;335559740&quot;:300}\">\u00a0<\/span><\/li>\n<li><span data-contrast=\"none\">WithSecure Elements Mobile Protection (Android et iOS)<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:100,&quot;335559740&quot;:300}\">\u00a0<\/span><\/li>\n<li><span data-contrast=\"none\">WithSecure Elements Collaboration Protection<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:100,&quot;335559740&quot;:300}\">\u00a0<\/span><\/li>\n<\/ul>\n<p><span data-ccp-props=\"{&quot;335559739&quot;:120}\">\u00a0<\/span><span data-contrast=\"none\">Tous les autres produits, services, sites web et pages web publiques de WithSecure sont exclus du champ d&rsquo;application de ce programme de r\u00e9compense et ne sont pas \u00e9ligibles \u00e0 une r\u00e9compense. Les signalements sont les bienvenus, mais ne rel\u00e8vent pas du programme de r\u00e9compense.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:300}\">\u00a0<\/span><\/p>\n<p aria-level=\"3\"><strong>Versions prises en charge\u00a0<\/strong><\/p>\n<p><span data-contrast=\"none\">Les recherches doivent \u00eatre men\u00e9es sur la derni\u00e8re version g\u00e9n\u00e9ralement disponible, avec les derni\u00e8res mises \u00e0 jour de base de donn\u00e9es ou de contenu install\u00e9es, telle que publi\u00e9e via les canaux officiels de WithSecure, Google Play ou l&rsquo;App Store d&rsquo;Apple.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:300}\">\u00a0<\/span><\/p>\n<p aria-level=\"3\"><strong>Restrictions de reproductibilit\u00e9\u00a0<\/strong><\/p>\n<p><span data-contrast=\"none\">Les probl\u00e8mes de s\u00e9curit\u00e9 c\u00f4t\u00e9 navigateur doivent \u00eatre reproductibles dans un navigateur web compatible HTML5. Les vuln\u00e9rabilit\u00e9s des clients mobiles doivent \u00eatre reproductibles sur un appareil non root\u00e9 ex\u00e9cutant le dernier micrologiciel fourni par le fabricant, qui ne doit pas avoir plus d&rsquo;un an. Sur Android, l&rsquo;appareil doit disposer des services Google Play install\u00e9s en usine.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:300}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"none\">Sur les clients de bureau, le probl\u00e8me doit \u00eatre reproductible sur un syst\u00e8me d&rsquo;exploitation disposant des derniers correctifs de s\u00e9curit\u00e9 fournis par l&rsquo;\u00e9diteur ou la distribution du syst\u00e8me d&rsquo;exploitation, sans que l&rsquo;attaquant ait besoin de droits d&rsquo;administrateur ou root. Les vuln\u00e9rabilit\u00e9s \u00e9ligibles des clients doivent se trouver dans du code que WithSecure fournit dans le cadre de l&rsquo;application cliente. Les vuln\u00e9rabilit\u00e9s des composants tiers sont g\u00e9n\u00e9ralement \u00e9ligibles si ces composants sont fournis dans le cadre de l&rsquo;application cliente WithSecure.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:300}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"none\">Les probl\u00e8mes affectant la plateforme sous-jacente, le syst\u00e8me d&rsquo;exploitation ou les biblioth\u00e8ques fournies par la plateforme peuvent \u00eatre \u00e9ligibles s&rsquo;ils se manifestent dans un produit WithSecure Elements couvert par le programme ou l&rsquo;affectent. Pour les vuln\u00e9rabilit\u00e9s concernant des composants externes, nous proposerons d&rsquo;informer les parties concern\u00e9es dans les meilleurs d\u00e9lais. Si vous avez besoin de pr\u00e9cisions, contactez-nous avant de commencer vos recherches.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:300}\">\u00a0<\/span><\/p>\n<p aria-level=\"3\"><strong>Recherche de s\u00e9curit\u00e9 autoris\u00e9e\u00a0<\/strong><\/p>\n<p><span data-contrast=\"none\">Nous n&rsquo;autorisons que les recherches de s\u00e9curit\u00e9 qui :<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:300}\">\u00a0<\/span><\/p>\n<ul>\n<li aria-setsize=\"-1\" data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"2\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:420,&quot;335559991&quot;:260,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"62\" data-aria-level=\"1\"><span data-contrast=\"none\">s&rsquo;efforcent de bonne foi d&rsquo;\u00e9viter d&rsquo;affecter des services tiers ou leur disponibilit\u00e9 ;<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:100,&quot;335559740&quot;:300}\">\u00a0<\/span><\/li>\n<\/ul>\n<ul>\n<li aria-setsize=\"-1\" data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"2\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:420,&quot;335559991&quot;:260,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"63\" data-aria-level=\"1\"><span data-contrast=\"none\">s&rsquo;efforcent de bonne foi de ne pas acc\u00e9der aux comptes, donn\u00e9es personnelles ou contenus d&rsquo;autres utilisateurs, de ne pas les affecter ni les divulguer, et de ne pas affecter la disponibilit\u00e9 du service pour d&rsquo;autres utilisateurs ;<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:100,&quot;335559740&quot;:300}\">\u00a0<\/span><\/li>\n<\/ul>\n<ul>\n<li aria-setsize=\"-1\" data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"2\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:420,&quot;335559991&quot;:260,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"64\" data-aria-level=\"1\"><span data-contrast=\"none\">n&rsquo;utilisent que des comptes vous appartenant personnellement \u2013 vous pouvez cr\u00e9er plusieurs comptes sp\u00e9cifiquement pour la recherche dans le cadre de ce programme ;<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:100,&quot;335559740&quot;:300}\">\u00a0<\/span><\/li>\n<\/ul>\n<ul>\n<li aria-setsize=\"-1\" data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"2\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:420,&quot;335559991&quot;:260,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"65\" data-aria-level=\"1\"><span data-contrast=\"none\">ne ciblent que des comptes, des donn\u00e9es utilisateur ou des donn\u00e9es personnelles vous appartenant, ou utilisent des donn\u00e9es de test fictives ;<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:100,&quot;335559740&quot;:300}\">\u00a0<\/span><\/li>\n<\/ul>\n<ul>\n<li aria-setsize=\"-1\" data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"2\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:420,&quot;335559991&quot;:260,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"66\" data-aria-level=\"1\"><span data-contrast=\"none\">n&rsquo;utilisent ou ne ciblent que des clients install\u00e9s sur du mat\u00e9riel que vous poss\u00e9dez et exploitez ;<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:100,&quot;335559740&quot;:300}\">\u00a0<\/span><\/li>\n<\/ul>\n<ul>\n<li aria-setsize=\"-1\" data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"2\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:420,&quot;335559991&quot;:260,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"67\" data-aria-level=\"1\"><span data-contrast=\"none\">n&rsquo;utilisent que des m\u00e9thodes conformes \u00e0 votre droit local et au droit finlandais ;<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:100,&quot;335559740&quot;:300}\">\u00a0<\/span><\/li>\n<\/ul>\n<ul>\n<li aria-setsize=\"-1\" data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"2\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:420,&quot;335559991&quot;:260,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"68\" data-aria-level=\"1\"><span data-contrast=\"none\">n&rsquo;utilisent pas de charges utiles malveillantes ou destructrices au-del\u00e0 de ce qui est techniquement n\u00e9cessaire pour une d\u00e9monstration de preuve de concept inoffensive ; et<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:100,&quot;335559740&quot;:300}\">\u00a0<\/span><\/li>\n<\/ul>\n<ul>\n<li aria-setsize=\"-1\" data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"2\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:420,&quot;335559991&quot;:260,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"69\" data-aria-level=\"1\"><span data-contrast=\"none\">ne ciblent que les produits et services \u00e9num\u00e9r\u00e9s ci-dessus, sous r\u00e9serve des exclusions mentionn\u00e9es.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:100,&quot;335559740&quot;:300}\">\u00a0<\/span><\/li>\n<\/ul>\n<p><span data-ccp-props=\"{&quot;335559739&quot;:120}\">\u00a0<\/span><span data-contrast=\"none\">Si vous avez des questions sur le fait de savoir si une recherche particuli\u00e8re est autoris\u00e9e ou si une cible entre dans le champ d&rsquo;application, contactez-nous \u00e0 l&rsquo;adresse <a href=\"mailto:security@withsecure.com\">security@withsecure.com<\/a> avant de mener vos recherches.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:300}\">\u00a0<\/span><\/p>\n<h2 aria-level=\"2\"><b><span data-contrast=\"none\">Comment signaler une vuln\u00e9rabilit\u00e9<\/span><\/b><span data-ccp-props=\"{&quot;335559738&quot;:200,&quot;335559739&quot;:120}\">\u00a0<\/span><\/h2>\n<p><span data-contrast=\"none\">Envoyez votre signalement par e-mail \u00e0 <a href=\"mailto:security@withsecure.com\">security@withsecure.com<\/a>. Nous recommandons vivement de chiffrer l&rsquo;e-mail \u00e0 l&rsquo;aide de notre cl\u00e9 PGP, disponible sur les serveurs de cl\u00e9s, et d&rsquo;y joindre votre propre cl\u00e9 publique. L&#8217;empreinte de notre cl\u00e9 PGP est 2622\u00a0 90BA\u00a0 C1DB\u00a0 AB46\u00a0 2954\u00a0 B150\u00a0 1518\u00a0 05EB\u00a0 454B\u00a0 15C4<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:300}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"none\">En soumettant un signalement de vuln\u00e9rabilit\u00e9, vous nous accordez une licence et un droit perp\u00e9tuels, mondiaux, libres de redevances, irr\u00e9vocables et non exclusifs d&rsquo;utiliser, de modifier et d&rsquo;int\u00e9grer votre soumission, ou toute partie de celle-ci, dans nos produits, services ou syst\u00e8mes de test, sans obligation suppl\u00e9mentaire ni notification de notre part.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:300}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"none\">Les signalements de bogues et les demandes de service client sans lien avec la s\u00e9curit\u00e9 ou la confidentialit\u00e9 envoy\u00e9s \u00e0 cette adresse e-mail seront ignor\u00e9s. Pour toute question non li\u00e9e \u00e0 la s\u00e9curit\u00e9 concernant les produits WithSecure, veuillez consulter la WithSecure Community ou contacter le Support for Business.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:300}\">\u00a0<\/span><\/p>\n<p aria-level=\"3\"><span data-contrast=\"none\">Preuve de concept requise et d\u00e9tails de reproduction<\/span><span data-ccp-props=\"{&quot;335559738&quot;:160,&quot;335559739&quot;:100}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"none\">Pour \u00eatre \u00e9ligible \u00e0 une r\u00e9compense et \u00e9tablir une priorit\u00e9 de soumission, votre signalement doit inclure une preuve de concept (PoC) fonctionnelle et inoffensive, ainsi que des instructions pr\u00e9cises nous permettant de reproduire la vuln\u00e9rabilit\u00e9 de mani\u00e8re ind\u00e9pendante.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:300}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"none\">Un PoC fonctionnel est le plus petit exemple non destructif qui d\u00e9clenche la vuln\u00e9rabilit\u00e9 et d\u00e9montre visiblement l&rsquo;impact de s\u00e9curit\u00e9 all\u00e9gu\u00e9. Votre signalement doit inclure :<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:300}\">\u00a0<\/span><\/p>\n<ul>\n<li aria-setsize=\"-1\" data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"2\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:420,&quot;335559991&quot;:260,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"70\" data-aria-level=\"1\"><span data-contrast=\"none\">une description concise du probl\u00e8me, incluant le comportement attendu, le comportement observ\u00e9 et la limite de s\u00e9curit\u00e9 ou de confidentialit\u00e9 contourn\u00e9e ;<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:100,&quot;335559740&quot;:300}\">\u00a0<\/span><\/li>\n<\/ul>\n<ul>\n<li aria-setsize=\"-1\" data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"2\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:420,&quot;335559991&quot;:260,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"71\" data-aria-level=\"1\"><span data-contrast=\"none\">le produit, le composant, le point de terminaison ou l&rsquo;URI exact affect\u00e9, ainsi que l&rsquo;environnement test\u00e9, y compris les num\u00e9ros de version ou de build applicables, la plateforme, le syst\u00e8me d&rsquo;exploitation, le navigateur, la version de la base de donn\u00e9es, le r\u00f4le du compte, les privil\u00e8ges, la configuration et les pr\u00e9requis ;<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:100,&quot;335559740&quot;:300}\">\u00a0<\/span><\/li>\n<\/ul>\n<ul>\n<li aria-setsize=\"-1\" data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"2\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:420,&quot;335559991&quot;:260,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"72\" data-aria-level=\"1\"><span data-contrast=\"none\">une liste num\u00e9rot\u00e9e et concise des \u00e9tapes, partant d&rsquo;un \u00e9tat de r\u00e9f\u00e9rence clairement d\u00e9fini, avec toutes les commandes, requ\u00eates, param\u00e8tres, scripts, charges utiles, fichiers et autres entr\u00e9es requis ;<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:100,&quot;335559740&quot;:300}\">\u00a0<\/span><\/li>\n<\/ul>\n<ul>\n<li aria-setsize=\"-1\" data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"2\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:420,&quot;335559991&quot;:260,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"73\" data-aria-level=\"1\"><span data-contrast=\"none\">l&rsquo;ensemble du mat\u00e9riel \u00a0du PoC et les instructions permettant de l&rsquo;ex\u00e9cuter, y compris les d\u00e9pendances ou la configuration requises ;<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:100,&quot;335559740&quot;:300}\">\u00a0<\/span><\/li>\n<\/ul>\n<ul>\n<li aria-setsize=\"-1\" data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"2\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:420,&quot;335559991&quot;:260,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"74\" data-aria-level=\"1\"><span data-contrast=\"none\">le r\u00e9sultat prouvant l&rsquo;exploitation r\u00e9ussie et une explication de l&rsquo;impact pratique sur la s\u00e9curit\u00e9 ; et<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:100,&quot;335559740&quot;:300}\">\u00a0<\/span><\/li>\n<\/ul>\n<ul>\n<li aria-setsize=\"-1\" data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"2\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:420,&quot;335559991&quot;:260,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"75\" data-aria-level=\"1\"><span data-contrast=\"none\">si le probl\u00e8me est intermittent, les conditions, le timing et le taux de r\u00e9ussite approximatif n\u00e9cessaires \u00e0 sa reproduction.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:100,&quot;335559740&quot;:300}\">\u00a0<\/span><\/li>\n<\/ul>\n<p><span data-ccp-props=\"{&quot;335559739&quot;:120}\">\u00a0<\/span><span data-contrast=\"none\">Pour une vuln\u00e9rabilit\u00e9 affectant un service, indiquez la date et l&rsquo;heure en UTC auxquelles vous l&rsquo;avez reproduite, car le service peut avoir chang\u00e9 depuis. Pour les d\u00e9couvertes issues du fuzzing, indiquez \u00e9galement le corpus initial et l&rsquo;entr\u00e9e d\u00e9clenchant le probl\u00e8me.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:300}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"none\">Toutes les informations n\u00e9cessaires pour reproduire le probl\u00e8me doivent figurer dans le signalement et ses pi\u00e8ces jointes. Des captures d&rsquo;\u00e9cran et des vid\u00e9os peuvent \u00eatre incluses \u00e0 titre de preuve \u00e0 l&rsquo;appui, mais ne remplacent pas \u00a0le PoC ni les \u00e9tapes de reproduction \u00e9crites. Une description th\u00e9orique, la sortie d&rsquo;un scanner automatis\u00e9, une correspondance de version ou de CVE, un journal de plantage, une capture d&rsquo;\u00e9cran ou une vid\u00e9o seuls ne constituent pas un PoC fonctionnel.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:300}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"none\">Le \u00a0PoC doit respecter les r\u00e8gles de recherche autoris\u00e9e \u00e9nonc\u00e9es ci-dessus et n&rsquo;utiliser que des comptes, des donn\u00e9es et du mat\u00e9riel que vous poss\u00e9dez ou contr\u00f4lez. Vous pouvez \u00e9galement inclure une correction sugg\u00e9r\u00e9e, mais cela est facultatif.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:300}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"none\">Les signalements ne r\u00e9pondant pas \u00e0 ces exigences sont consid\u00e9r\u00e9s comme incomplets et ne sont \u00e9ligibles ni \u00e0 une r\u00e9compense ni \u00e0 une priorit\u00e9 de soumission. Si nous ne parvenons pas \u00e0 reproduire la vuln\u00e9rabilit\u00e9 \u00e0 partir des informations et du mat\u00e9riel fournis, nous ne pouvons pas la r\u00e9compenser.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:300}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"none\">Nous nous effor\u00e7ons d&rsquo;accuser r\u00e9ception dans un d\u00e9lai de cinq jours ouvrables. Si vous n&rsquo;avez pas de nouvelles de notre part d&rsquo;ici l\u00e0, veuillez renvoyer votre signalement.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:300}\">\u00a0<\/span><\/p>\n<h2 aria-level=\"2\"><b><span data-contrast=\"none\">Ce qui se passe apr\u00e8s votre signalement<\/span><\/b><span data-ccp-props=\"{&quot;335559738&quot;:200,&quot;335559739&quot;:120}\">\u00a0<\/span><\/h2>\n<p><span data-contrast=\"none\">Nos d\u00e9veloppeurs d\u00e9termineront si votre d\u00e9couverte constitue une vuln\u00e9rabilit\u00e9 de s\u00e9curit\u00e9 et si nous pouvons la reproduire \u00e0 l&rsquo;aide des informations et du mat\u00e9riel que vous avez fournis. Si le signalement est \u00e9ligible, une r\u00e9compense sera vers\u00e9e apr\u00e8s correction du probl\u00e8me.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:300}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"none\">Nous ne pouvons pas nous engager sur un calendrier pr\u00e9cis de correction ou de paiement, car chaque cas est diff\u00e9rent. Nous accordons en interne une priorit\u00e9 \u00e9lev\u00e9e aux probl\u00e8mes de s\u00e9curit\u00e9 signal\u00e9s de l&rsquo;ext\u00e9rieur et nous nous effor\u00e7ons de vous tenir inform\u00e9. Vous pouvez \u00e9galement demander des mises \u00e0 jour de statut \u00e0 la personne charg\u00e9e de votre dossier.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:300}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"none\">Nous pouvons publier les noms des personnes que nous avons r\u00e9compens\u00e9es, et si nous publions un bulletin de vuln\u00e9rabilit\u00e9, nous souhaitons rendre le cr\u00e9dit qui vous est d\u00fb. Si vous pr\u00e9f\u00e9rez utiliser un pseudonyme ou rester anonyme, nous respecterons ce choix.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:300}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"none\">Dans certains cas, nous pouvons d\u00e9terminer qu&rsquo;un probl\u00e8me signal\u00e9 ne pr\u00e9sente pas de risque de s\u00e9curit\u00e9 ou ne constitue pas une vuln\u00e9rabilit\u00e9 de s\u00e9curit\u00e9 ou de confidentialit\u00e9. Aucune r\u00e9compense ne sera vers\u00e9e dans ces cas.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:300}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"none\">Aucune r\u00e9compense ne sera vers\u00e9e si la d\u00e9couverte est rendue publique de quelque mani\u00e8re que ce soit avant sa correction. Si une autre personne a signal\u00e9 le m\u00eame probl\u00e8me pr\u00e9c\u00e9demment, nous vous en informerons une fois le probl\u00e8me corrig\u00e9. Si plusieurs chercheurs signalent le m\u00eame probl\u00e8me, seul le premier signalement complet incluant un PoC fonctionnel et toutes les informations n\u00e9cessaires \u00e0 une reproduction ind\u00e9pendante est \u00e9ligible \u00e0 la r\u00e9compense.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:300}\">\u00a0<\/span><\/p>\n<h2 aria-level=\"2\"><b><span data-contrast=\"none\">Paiements<\/span><\/b><span data-ccp-props=\"{&quot;335559738&quot;:200,&quot;335559739&quot;:120}\">\u00a0<\/span><\/h2>\n<p><span data-contrast=\"none\">Important : n&rsquo;envoyez pas d&rsquo;informations de paiement avec votre signalement initial. Nous demanderons les informations appropri\u00e9es si et quand un paiement doit \u00eatre effectu\u00e9.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:300}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"none\">Les paiements sont effectu\u00e9s par virement bancaire au sein de l&rsquo;espace unique de paiement en euros (SEPA) ou par virement bancaire international en dehors de la zone SEPA. Nous ne pouvons pas utiliser de ch\u00e8ques, de cryptomonnaies ou d&rsquo;autres services de transfert d&rsquo;argent. Le b\u00e9n\u00e9ficiaire est responsable des frais de virement ainsi que de l&rsquo;acc\u00e8s aux fonds apr\u00e8s le transfert. Les paiements sont effectu\u00e9s par d\u00e9faut en euros (EUR), et les conversions de devises utilisent le taux bancaire en vigueur.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:300}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"none\">Nous sommes tenus de d\u00e9clarer les r\u00e9compenses vers\u00e9es aux chercheurs individuels \u00e0 l&rsquo;administration fiscale finlandaise, quel que soit le lieu de r\u00e9sidence du b\u00e9n\u00e9ficiaire. Pour effectuer le paiement et satisfaire \u00e0 cette exigence, nous vous demanderons vos nom et pr\u00e9nom complets, votre date de naissance, votre adresse postale actuelle et vos coordonn\u00e9es bancaires. Si vous disposez d&rsquo;une entreprise, nous pourrons vous demander de nous facturer \u00e0 la place.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:300}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"none\">Le b\u00e9n\u00e9ficiaire est responsable de tous les imp\u00f4ts. Si vous \u00eates impos\u00e9 en Finlande, nous devons pr\u00e9lever une retenue \u00e0 la source et aurons besoin de votre num\u00e9ro d&rsquo;identit\u00e9 personnel ainsi que, facultativement, de votre attestation fiscale pour l&rsquo;ann\u00e9e en cours.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:300}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"none\">Ces exigences d&rsquo;identification sont impos\u00e9es par les autorit\u00e9s et nous ne pouvons pas faire d&rsquo;exception. Aucun paiement n&rsquo;est effectu\u00e9 vers des pays ou juridictions sous embargo, ni \u00e0 des personnes ou entit\u00e9s figurant sur une liste de sanctions.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:300}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"none\">En raison de ces exigences d&rsquo;identification, nous traitons directement uniquement avec l&rsquo;auteur original du signalement. Nous n&rsquo;utilisons que l&rsquo;adresse e-mail figurant dans le signalement d&rsquo;origine ; veillez donc \u00e0 conserver l&rsquo;acc\u00e8s \u00e0 ce compte.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:300}\">\u00a0<\/span><\/p>\n<h2 aria-level=\"2\"><b><span data-contrast=\"none\">Autres mentions l\u00e9gales<\/span><\/b><span data-ccp-props=\"{&quot;335559738&quot;:200,&quot;335559739&quot;:120}\">\u00a0<\/span><\/h2>\n<p><span data-contrast=\"none\">Vous pouvez effectuer de l&rsquo;ing\u00e9nierie inverse et d\u00e9compiler les clients WithSecure exclusivement dans le but de mener des recherches de s\u00e9curit\u00e9 dans le cadre de ce programme de r\u00e9compense pour la d\u00e9couverte de vuln\u00e9rabilit\u00e9s. Cette autorisation ne s&rsquo;applique qu&rsquo;aux clients WithSecure Elements explicitement \u00e9num\u00e9r\u00e9s dans ce programme et exclut tout composant tiers sous licence. Vous ne pouvez divulguer, montrer ou publier \u00e0 un tiers, sous quelque forme que ce soit, aucun code ou partie de code issu de cette autorisation.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:300}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"none\">Une description du registre de donn\u00e9es personnelles utilis\u00e9 pour le versement des r\u00e9compenses est disponible sur le site de WithSecure (Personal data record).<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:300}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"none\">WithSecure se r\u00e9serve le droit d&rsquo;interrompre ce programme de r\u00e9compense ou d&rsquo;en modifier les conditions \u00e0 tout moment, sans pr\u00e9avis. Ce texte a \u00e9t\u00e9 modifi\u00e9 pour la derni\u00e8re fois le 08\/09\/2026. Le programme de r\u00e9compense pour la d\u00e9couverte de vuln\u00e9rabilit\u00e9s n&rsquo;a actuellement pas de date de fin fixe. Toutes les d\u00e9cisions relatives aux r\u00e9compenses sont d\u00e9finitives. Les r\u00e8gles de ce programme et toute communication associ\u00e9e ne cr\u00e9ent ni n&rsquo;impliquent aucune obligation pour WithSecure.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:300}\">\u00a0<\/span><\/p>\n<h2 aria-level=\"2\"><b><span data-contrast=\"none\">R\u00e9compenses<\/span><\/b><span data-ccp-props=\"{&quot;335559738&quot;:200,&quot;335559739&quot;:120}\">\u00a0<\/span><\/h2>\n<p><span data-contrast=\"none\">La r\u00e9compense est d\u00e9termin\u00e9e exclusivement par une \u00e9quipe WithSecure compos\u00e9e de personnel technique et se fonde sur le risque estim\u00e9 pos\u00e9 par la vuln\u00e9rabilit\u00e9. La fourchette de r\u00e9compense actuelle va de 200 \u00e0 6 000 euros.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:300}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"none\">Si vous signalez plusieurs probl\u00e8mes qui sont des doublons dans diff\u00e9rentes parties d&rsquo;un service \u2013 par exemple, le m\u00eame code s&rsquo;ex\u00e9cutant sur des n\u0153uds ou plateformes diff\u00e9rents \u2013 ou qui font partie d&rsquo;un probl\u00e8me plus vaste, nous pouvons les regrouper et ne verser qu&rsquo;une seule r\u00e9compense.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:300}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"none\">Le tableau suivant donne des exemples de cat\u00e9gories de bogues et des r\u00e9compenses correspondantes. Il ne couvre pas toutes les cat\u00e9gories de bogues possibles, mais illustre la mani\u00e8re dont la gravit\u00e9 est li\u00e9e \u00e0 la r\u00e9compense.<\/span><\/p>\n<table style=\"border-collapse: collapse; width: 100%;\" border=\"1\">\n<tbody>\n<tr>\n<td style=\"width: 11.5796%;\"><span class=\"TextRun SCXW7887407 BCX8\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"none\"><span class=\"NormalTextRun SpellingErrorV2Themed SpellingErrorHighlight SCXW7887407 BCX8\">Jusqu&rsquo;\u00e0<\/span><span class=\"NormalTextRun SCXW7887407 BCX8\"> 6 000 \u20ac<\/span><\/span><span class=\"EOP Selected SCXW7887407 BCX8\" data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559740&quot;:280}\">\u00a0<\/span><\/td>\n<td style=\"width: 88.4204%;\">Ex\u00e9cution de code \u00e0 distance sur un backend cloud Elements de production ; inclusion de fichier distant sur un backend cloud Elements de production ; contournement significatif de l&rsquo;authentification sur un backend cloud Elements de production contenant des informations critiques.<\/td>\n<\/tr>\n<tr>\n<td style=\"width: 11.5796%;\"><span class=\"TextRun SCXW221207625 BCX8\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"none\"><span class=\"NormalTextRun SpellingErrorV2Themed SCXW221207625 BCX8\">Jusqu&rsquo;\u00e0<\/span><span class=\"NormalTextRun SCXW221207625 BCX8\"> 3 500 \u20ac<\/span><\/span><span class=\"EOP Selected SCXW221207625 BCX8\" data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559740&quot;:280}\">\u00a0<\/span><\/td>\n<td style=\"width: 88.4204%;\">\u00c9l\u00e9vation de privil\u00e8ges dans un service cloud Elements accordant des droits d&rsquo;administrateur \u00e0 un utilisateur disposant de privil\u00e8ges limit\u00e9s.<\/td>\n<\/tr>\n<tr>\n<td style=\"width: 11.5796%;\"><span class=\"TextRun SCXW134798645 BCX8\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"none\"><span class=\"NormalTextRun SpellingErrorV2Themed SCXW134798645 BCX8\">Jusqu&rsquo;\u00e0<\/span><span class=\"NormalTextRun SCXW134798645 BCX8\"> 2 500 \u20ac<\/span><\/span><span class=\"EOP Selected SCXW134798645 BCX8\" data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559740&quot;:280}\">\u00a0<\/span><\/td>\n<td style=\"width: 88.4204%;\"><span class=\"TextRun SCXW218236155 BCX8\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"none\"><span class=\"NormalTextRun SpellingErrorV2Themed SCXW218236155 BCX8\">Ex\u00e9cution<\/span><span class=\"NormalTextRun SCXW218236155 BCX8\"> de code \u00e0 distance dans le <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW218236155 BCX8\">logiciel<\/span><span class=\"NormalTextRun SCXW218236155 BCX8\"> client <\/span><span class=\"NormalTextRun ContextualSpellingAndGrammarErrorV2Themed SCXW218236155 BCX8\">Elements ;<\/span><span class=\"NormalTextRun SCXW218236155 BCX8\"> extraction de donn\u00e9es <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW218236155 BCX8\">depuis<\/span><span class=\"NormalTextRun SCXW218236155 BCX8\"> un <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW218236155 BCX8\">serveur<\/span><span class=\"NormalTextRun SCXW218236155 BCX8\"> Elements de <\/span><span class=\"NormalTextRun ContextualSpellingAndGrammarErrorV2Themed SCXW218236155 BCX8\">production ;<\/span> <span class=\"NormalTextRun SpellingErrorV2Themed SCXW218236155 BCX8\">probl\u00e8me<\/span><span class=\"NormalTextRun SCXW218236155 BCX8\"> de <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW218236155 BCX8\">contr\u00f4le<\/span> <span class=\"NormalTextRun SpellingErrorV2Themed SCXW218236155 BCX8\">d&rsquo;acc\u00e8s<\/span> <span class=\"NormalTextRun SpellingErrorV2Themed SCXW218236155 BCX8\">exposant<\/span><span class=\"NormalTextRun SCXW218236155 BCX8\"> des donn\u00e9es \u00e0 <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW218236155 BCX8\">caract\u00e8re<\/span><span class=\"NormalTextRun SCXW218236155 BCX8\"> personnel.<\/span><\/span><span class=\"EOP Selected SCXW218236155 BCX8\" data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559740&quot;:280}\">\u00a0<\/span><\/td>\n<\/tr>\n<tr>\n<td style=\"width: 11.5796%;\"><span class=\"TextRun SCXW227793867 BCX8\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"none\"><span class=\"NormalTextRun SpellingErrorV2Themed SCXW227793867 BCX8\">Jusqu&rsquo;\u00e0<\/span><span class=\"NormalTextRun SCXW227793867 BCX8\"> 1 000 \u20ac<\/span><\/span><span class=\"EOP Selected SCXW227793867 BCX8\" data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559740&quot;:280}\">\u00a0<\/span><\/td>\n<td style=\"width: 88.4204%;\"><span class=\"TextRun SCXW29235210 BCX8\" lang=\"FR-FR\" xml:lang=\"FR-FR\" data-contrast=\"none\"><span class=\"NormalTextRun SCXW29235210 BCX8\">Ex\u00e9cution de code \u00e0 distance au sein <\/span><span class=\"NormalTextRun SCXW29235210 BCX8\">d&rsquo;un<\/span><span class=\"NormalTextRun SCXW29235210 BCX8\">e<\/span><span class=\"NormalTextRun SCXW29235210 BCX8\">\u00a0 <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW29235210 BCX8\">sandbox<\/span><span class=\"NormalTextRun SCXW29235210 BCX8\"> ; \u00e9l\u00e9vation de privil\u00e8ges locale sur une machine cliente ; d\u00e9ni de service persistant affectant les fonctionnalit\u00e9s antivirus ou de confidentialit\u00e9.<\/span><\/span><span class=\"EOP Selected SCXW29235210 BCX8\" data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559740&quot;:280}\">\u00a0<\/span><\/td>\n<\/tr>\n<tr>\n<td style=\"width: 11.5796%;\"><span class=\"TextRun SCXW2504125 BCX8\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"none\"><span class=\"NormalTextRun SpellingErrorV2Themed SCXW2504125 BCX8\">Jusqu&rsquo;\u00e0<\/span><span class=\"NormalTextRun SCXW2504125 BCX8\"> 350 \u20ac<\/span><\/span><span class=\"EOP Selected SCXW2504125 BCX8\" data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559740&quot;:280}\">\u00a0<\/span><\/td>\n<td style=\"width: 88.4204%;\"><span class=\"TextRun SCXW53075734 BCX8\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"none\"><span class=\"NormalTextRun SCXW53075734 BCX8\">D\u00e9ni de service temporaire affectant les <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW53075734 BCX8\">fonctionnalit\u00e9s<\/span> <span class=\"NormalTextRun ContextualSpellingAndGrammarErrorV2Themed SCXW53075734 BCX8\">antivirus ;<\/span> <span class=\"NormalTextRun SpellingErrorV2Themed SCXW53075734 BCX8\">d\u00e9ni<\/span><span class=\"NormalTextRun SCXW53075734 BCX8\"> de service <\/span><span class=\"NormalTextRun SCXW53075734 BCX8\">temporaire<\/span><span class=\"NormalTextRun SCXW53075734 BCX8\"> \u00e0 fort impact <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW53075734 BCX8\">affectant<\/span><span class=\"NormalTextRun SCXW53075734 BCX8\"> les <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW53075734 BCX8\">fonctionnalit\u00e9s<\/span><span class=\"NormalTextRun SCXW53075734 BCX8\"> locales du <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW53075734 BCX8\">produit<\/span><span class=\"NormalTextRun SCXW53075734 BCX8\">.<\/span><\/span><span class=\"EOP Selected SCXW53075734 BCX8\" data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559740&quot;:280}\">\u00a0<\/span><\/td>\n<\/tr>\n<tr>\n<td style=\"width: 11.5796%;\"><span class=\"TextRun SCXW14911165 BCX8\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"none\"><span class=\"NormalTextRun SpellingErrorV2Themed SCXW14911165 BCX8\">Jusqu&rsquo;\u00e0<\/span><span class=\"NormalTextRun SCXW14911165 BCX8\"> 200 \u20ac<\/span><\/span><span class=\"EOP Selected SCXW14911165 BCX8\" data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559740&quot;:280}\">\u00a0<\/span><\/td>\n<td style=\"width: 88.4204%;\"><span class=\"TextRun SCXW28267588 BCX8\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"none\"><span class=\"NormalTextRun SpellingErrorV2Themed SCXW28267588 BCX8\">Mauvaise<\/span><span class=\"NormalTextRun SCXW28267588 BCX8\"> configuration <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW28267588 BCX8\">li\u00e9e<\/span><span class=\"NormalTextRun SCXW28267588 BCX8\"> \u00e0 la s\u00e9curit\u00e9 dans un service <\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW28267588 BCX8\">ou<\/span><span class=\"NormalTextRun SCXW28267588 BCX8\"> un client Elements de production.<\/span><\/span><span class=\"EOP Selected SCXW28267588 BCX8\" data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559740&quot;:280}\">\u00a0<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n                <\/div>\n                        <\/div>\n<\/section>\n\n\n<section\n    class=\"wp-block-logos edwp-block js-wp-block-logos layout--spacing-xxxl-top layout--spacing-xxxl-bottom\"\n    >\n    <div class=\"wp-block-logos__container\">\n        <div class=\"wp-block-logos__box\">\n            <h2 class=\"wp-component-heading text--h3 wp-component-content__title fade-in\">\n    <span class=\"blue-text\">Accr\u00e9ditations<\/span>  et certifications<\/h2>            <div class=\"swiper wp-block-logos__swiper js-wp-block-logos-swiper\">\n                <div class=\"swiper-wrapper wp-block-logos__swiper-wrapper row-load\">\n                                            <div class=\"swiper-slide wp-block-logos__slide wp-block-logos__logo\">\n                            <img loading=\"lazy\" decoding=\"async\" width=\"146\" height=\"146\" src=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2025\/11\/Group-811999.png.webp\" class=\"attachment-logo size-logo\" alt=\"\" \/>                        <\/div>\n                                            <div class=\"swiper-slide wp-block-logos__slide wp-block-logos__logo\">\n                            <img loading=\"lazy\" decoding=\"async\" width=\"146\" height=\"146\" src=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2025\/11\/Group-811997.png.webp\" class=\"attachment-logo size-logo\" alt=\"\" \/>                        <\/div>\n                                            <div class=\"swiper-slide wp-block-logos__slide wp-block-logos__logo\">\n                            <img loading=\"lazy\" decoding=\"async\" width=\"146\" height=\"146\" src=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2025\/11\/Group-811998.png.webp\" class=\"attachment-logo size-logo\" alt=\"\" \/>                        <\/div>\n                                            <div class=\"swiper-slide wp-block-logos__slide wp-block-logos__logo\">\n                            <img loading=\"lazy\" decoding=\"async\" width=\"143\" height=\"146\" src=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2025\/11\/SAE3000ii-143x146.png.webp\" class=\"attachment-logo size-logo\" alt=\"\" srcset=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2025\/11\/SAE3000ii-143x146.png.webp 143w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2025\/11\/SAE3000ii.png.webp 288w\" sizes=\"auto, (max-width: 143px) 100vw, 143px\" \/>                        <\/div>\n                                            <div class=\"swiper-slide wp-block-logos__slide wp-block-logos__logo\">\n                            <img loading=\"lazy\" decoding=\"async\" width=\"146\" height=\"146\" src=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2025\/11\/iso27001-146x146.png.webp\" class=\"attachment-logo size-logo\" alt=\"\" srcset=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2025\/11\/iso27001-146x146.png.webp 146w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2025\/11\/iso27001-300x300.png.webp 300w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2025\/11\/iso27001-150x150.png.webp 150w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2025\/11\/iso27001.png.webp 400w\" sizes=\"auto, (max-width: 146px) 100vw, 146px\" \/>                        <\/div>\n                                            <div class=\"swiper-slide wp-block-logos__slide wp-block-logos__logo\">\n                            <img loading=\"lazy\" decoding=\"async\" width=\"241\" height=\"200\" src=\"https:\/\/www.withsecure.com\/wp-content\/uploads\/2026\/04\/cybersecurity-made-in-europe.svg\" class=\"attachment-logo size-logo\" alt=\"\" \/>                        <\/div>\n                                    <\/div>\n            <\/div>\n        <\/div>\n        <div class=\"wp-block-logos__nav fade-in\">\n            <div class=\"wp-block-logos__pagination js-wp-block-logos-pagination\">\n            <\/div>\n            <div class=\"wp-block-logos__nav-arrow js-wp-block-logos-nav-prev\">\n                <svg class='edwp-icon edwp-icon--reg js-icon ' aria-hidden='true'>\n                <use xlink:href='#chevron'><\/use>\n            <\/svg>            <\/div>\n            <div class=\"wp-block-logos__nav-arrow js-wp-block-logos-nav-next\">\n                <svg class='edwp-icon edwp-icon--reg js-icon ' aria-hidden='true'>\n                <use xlink:href='#chevron'><\/use>\n            <\/svg>            <\/div>\n        <\/div>\n    <\/div>\n<\/section>\n\n\n<section\n    class=\"wp-block-two-column-block edwp-block js-wp-block-two-column-block wp-block-two-column-block--content-1 wp-block-two-column-block__left--align-y-middle wp-block-two-column-block__right--align-y-middle wp-block-two-column-block--split-50-50 layout--spacing-xxxl-top layout--spacing-xxxl-bottom\"\n    data-block-id=\"block_e07821fa5e84b813038d14bdb56bb0e0\"\n    >\n    <div class=\"wp-block-two-column-block__container row-load\">\n                                                        <div class=\"wp-block-two-column-block__left\">\n                                <div class=\"wp-component-content wp-component-content--default wp-block-two-column-block__content \">\n            <h2 class=\"wp-component-heading text--h2 wp-component-content__title\">\n    Fichier de donn\u00e9es  <span class=\"blue-text\"> personnelles <\/span><\/h2>                    <div class=\"wp-component-content__inner\">\n                                    <div class=\"wp-component-content__content wysiwyg\">\n                        <div class=\"wp-component-paragraph \">\n    <p>Comment nous traitons vos donn\u00e9es personnelles.<\/p>\n<p>Informations sur les donn\u00e9es collect\u00e9es, la fa\u00e7on dont nous traitons les donn\u00e9es personnelles et vos droits en tant que personne concern\u00e9e.<\/p>\n<\/div>\n                    <\/div>\n                                                                    <div class=\"wp-component-content__buttons\">\n                        <a class=\"wp-component-button btn btn--primary\" href=\"https:\/\/www.withsecure.com\/fr\/a-propos-de-nous\/vulnerability-reward-program\/donnees-personnelles\/\">En savoir plus<\/a>                    <\/div>\n                            <\/div>\n                <\/div>                <\/div>\n                                                <div class=\"wp-block-two-column-block__right\">\n                                        <div class=\"wp-component-image__wrapper wp-component-image--wrapped wp-block-two-column-block__image \">\n                    <figure class=\"wp-component-image__figure\">\n                                            <img loading=\"lazy\" decoding=\"async\" width=\"600\" height=\"600\" src=\"https:\/\/www.withsecure.com\/wp-content\/uploads\/2025\/11\/luminen-ui-ezgif-com-video-to-gif-converter.gif\" class=\"wp-component-image\n                            wp-component-image--desktop\n                            wp-component-image--mobile\n                            wp-component-image--ratio-full wp-component-image--fit-contained\" alt=\"\" \/>                                                    <\/figure>\n                    <\/div>\n                <\/div>\n                        <\/div>\n<\/section>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":3,"featured_media":0,"parent":8001,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-8050","page","type-page","status-publish","hentry"],"acf":[],"card":"<div class=\"wp-component-card-insight js-card-link wp-component-card-insight--highlighted\">\n    <div class=\"wp-component-card-insight__image-wrapper\">\n        <img width=\"618\" height=\"440\" src=\"https:\/\/www.withsecure.com\/wp-content\/uploads\/2026\/05\/placeholder.jpg\" class=\"wp-component-card-insight__image\" alt=\"\" decoding=\"async\" loading=\"lazy\" srcset=\"https:\/\/www.withsecure.com\/wp-content\/uploads\/2026\/05\/placeholder.jpg 618w, https:\/\/www.withsecure.com\/wp-content\/uploads\/2026\/05\/placeholder-300x214.jpg 300w, https:\/\/www.withsecure.com\/wp-content\/uploads\/2026\/05\/placeholder-447x318.jpg 447w, https:\/\/www.withsecure.com\/wp-content\/uploads\/2026\/05\/placeholder-205x146.jpg 205w\" sizes=\"auto, (max-width: 618px) 100vw, 618px\" \/>                    <p class=\"wp-component-card-insight__content-type\">Page<\/p>\n            <\/div>\n    <div class=\"wp-component-card-insight__content\">\n                            <h3 class=\"wp-component-card-insight__title\">Vulnerability reward program<\/h3>\n                                                    <div class=\"wp-component-card-insight__button-wrapper\">\n                <a class=\"wp-component-button btn btn--primary btn--dark wp-component-card-insight__button btn--small\" href=\"https:\/\/www.withsecure.com\/fr\/a-propos-de-nous\/vulnerability-reward-program\/\">En savoir plus<\/a>            <\/div>\n            <\/div>\n<\/div>","_links":{"self":[{"href":"https:\/\/www.withsecure.com\/fr\/wp-json\/wp\/v2\/pages\/8050","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.withsecure.com\/fr\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.withsecure.com\/fr\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.withsecure.com\/fr\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.withsecure.com\/fr\/wp-json\/wp\/v2\/comments?post=8050"}],"version-history":[{"count":12,"href":"https:\/\/www.withsecure.com\/fr\/wp-json\/wp\/v2\/pages\/8050\/revisions"}],"predecessor-version":[{"id":13800,"href":"https:\/\/www.withsecure.com\/fr\/wp-json\/wp\/v2\/pages\/8050\/revisions\/13800"}],"up":[{"embeddable":true,"href":"https:\/\/www.withsecure.com\/fr\/wp-json\/wp\/v2\/pages\/8001"}],"wp:attachment":[{"href":"https:\/\/www.withsecure.com\/fr\/wp-json\/wp\/v2\/media?parent=8050"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}