Instruction: Any asset/application that appears to be owned by Ford is in scope, but this is a priority domain.
The same vulnerability that is found on multiple domains will be treated as a SINGLE vulnerability. Please report all affected domains (e.g. ford.com.ca, ford.com.mx, ford.com.br, etc.) on a single report. All subsequent reports will be closed as a Duplicate.
Integrity requirements: high
Max severity: critical
Asset identifier: *.lincoln.com
Asset type: URL
Availability requirement: high
Confidentiality requirement: high
Eligible for bounty:
Eligible for submissions: true
Instruction: Any asset/application that appears to be owned by Ford is in scope, but this is a priority domain.
The same vulnerability that is found on multiple domains will be treated as a SINGLE vulnerability. Please report all affected domains (e.g. lincoln.com.ca, lincoln.com.mx, lincoln.com.br, etc.) on a single report. All subsequent reports will be closed as a Duplicate.
Integrity requirements: high
Max severity: critical
Asset identifier: *.motorcraft.com
Asset type: URL
Availability requirement:
Confidentiality requirement:
Eligible for bounty:
Eligible for submissions: true
Instruction: Any asset/application that appears to be owned by Ford is in scope, but this is a priority domain.
Integrity requirements:
Max severity: critical
Asset identifier: *.omnicraftautoparts.com
Asset type: URL
Availability requirement: high
Confidentiality requirement: high
Eligible for bounty:
Eligible for submissions: true
Instruction: Any asset/application that appears to be owned by Ford is in scope, but this is a priority domain.
Integrity requirements: high
Max severity: critical
Asset identifier: *.quicklane.com
Asset type: URL
Availability requirement: high
Confidentiality requirement: high
Eligible for bounty:
Eligible for submissions: true
Instruction: Any asset/application that appears to be owned by Ford is in scope, but this is a priority domain.
Integrity requirements: high
Max severity: critical
Asset identifier: 1068283395
Asset type: APPLE_STORE_APP_ID
Availability requirement:
Confidentiality requirement:
Eligible for bounty:
Eligible for submissions: true
Instruction: Ford App Catalog
https://appadvice.com/app/ford-app-catalog/1068283395
Instruction: The Lincoln Way
https://apps.apple.com/us/app/ford-performance-app/id1141482401
Integrity requirements:
Max severity: critical
Asset identifier: 1142223695
Asset type: APPLE_STORE_APP_ID
Availability requirement:
Confidentiality requirement:
Eligible for bounty:
Eligible for submissions: true
Instruction:
Integrity requirements:
Max severity: critical
Asset identifier: 1225744589
Asset type: APPLE_STORE_APP_ID
Availability requirement:
Confidentiality requirement:
Eligible for bounty:
Eligible for submissions: true
Instruction: Ford Performance App
https://apps.apple.com/us/app/ford-performance-app/id1225744589
Integrity requirements:
Max severity: critical
Asset identifier: 1290945517
Asset type: APPLE_STORE_APP_ID
Availability requirement:
Confidentiality requirement:
Eligible for bounty:
Eligible for submissions: true
Instruction: Ford Play
https://apps.apple.com/us/app/ford-play/id1290945517
Integrity requirements:
Max severity: critical
Asset identifier: 1290960071
Asset type: APPLE_STORE_APP_ID
Availability requirement:
Confidentiality requirement:
Eligible for bounty:
Eligible for submissions: true
Instruction: Lincoln Play
https://apps.apple.com/us/app/ford-performance-app/id1290960071
Integrity requirements:
Max severity: critical
Asset identifier: 1316029168
Asset type: APPLE_STORE_APP_ID
Availability requirement:
Confidentiality requirement:
Eligible for bounty:
Eligible for submissions: true
Instruction: Lincoln + Alexa
https://apps.apple.com/us/app/ford-performance-app/id1316029168
Integrity requirements:
Max severity: critical
Asset identifier: 1316029395
Asset type: APPLE_STORE_APP_ID
Availability requirement:
Confidentiality requirement:
Eligible for bounty:
Eligible for submissions: true
Instruction: Ford + Alexa
https://apps.apple.com/us/app/ford-alexa/id1316029395
Integrity requirements:
Max severity: critical
Asset identifier: 587040067
Asset type: APPLE_STORE_APP_ID
Availability requirement:
Confidentiality requirement:
Eligible for bounty:
Eligible for submissions: true
Instruction:
Integrity requirements:
Max severity: critical
Asset identifier: 599142823
Asset type: APPLE_STORE_APP_ID
Availability requirement:
Confidentiality requirement:
Eligible for bounty:
Eligible for submissions: true
Instruction: MyFord Mobile
https://apps.apple.com/us/app/myford-mobile/id599142823
Integrity requirements:
Max severity: critical
Asset identifier: 950707840
Asset type: APPLE_STORE_APP_ID
Availability requirement:
Confidentiality requirement:
Eligible for bounty:
Eligible for submissions: true
Instruction:
Integrity requirements:
Max severity: critical
Asset identifier: Vehicle
Asset type: HARDWARE
Availability requirement:
Confidentiality requirement:
Eligible for bounty:
Eligible for submissions: true
Instruction:
Integrity requirements:
Max severity: critical
Asset identifier: com.ford.fordalexa
Asset type: GOOGLE_PLAY_APP_ID
Availability requirement:
Confidentiality requirement:
Eligible for bounty:
Eligible for submissions: true
Instruction:
Integrity requirements:
Max severity: critical
Asset identifier: com.ford.fordpass
Asset type: GOOGLE_PLAY_APP_ID
Availability requirement:
Confidentiality requirement:
Eligible for bounty:
Eligible for submissions: true
Instruction: ## Test VIN: 1FMZU73W92UC83509
North America
https://play.google.com/store/apps/details?id=com.ford.fordpass&hl=en
South America
https://play.google.com/store/apps/details?id=com.ford.fordpasssa&hl=en
European Union
https://play.google.com/store/apps/details?id=com.ford.fordpasseu&hl=en
All services and api’s used within the FordPass application are in scope.
FordPass Android app available in North America, South America, Asia, and Europe.
The redesigned FordPass includes features such as parking and gas station suggestions and vehicle controls—now easier to use.
With FordPass you can:
-Get vehicle health alerts. SYNC® Connect (1)-equipped vehicles can track fuel levels and get alerts when your Ford needs attention.
- Find parking ahead of time in select cities. Search for parking by point of interest, city or address.
-Call or chat with a friendly FordGuide.
-Access Roadside Assistance.
- Find: Easily discover gas stations, restaurants and more.
-Move: Start, stop, lock, unlock and schedule starts¹ for vehicles with SYNC® Connect (1) with FordPass.
Vehicle Controls Available On:
2017: Ford F-150, Escape, Fusion
2018: Ford Fusion, F-150, F-150 Raptor, Escape, EcoSport, Expedition, Explorer, Mustang
Instruction: ### Test VIN: 1FMZU73W92UC83509
Explore the collection of premier services we call The Lincoln Way (1):
- With Lincoln Connect, start or stop your engine with a touch of a button or lock and unlock your Lincoln remotely for increased peace of mind (2)
- With Lincoln Connect, locate your vehicle from virtually anywhere (2)
- Access 24/7 complimentary Roadside Assistance for fuel delivery, lock-out assistance, towing and more (3)
-Schedule Lincoln Pickup & DeliveryTM—an exclusive maintenance offering that leaves a Lincoln vehicle for you to drive while we take care of your service needs (4)
-Discover destinations of interest near you including fuel stations and restaurants
- Wi-Fi hotspot: Set up and manage your mobile Lincoln Connect Wi-Fi hotspot plan.(5)
-Contact a Lincoln Concierge for personalized assistance with your Lincoln
-Reserve and pay for parking on your schedule (6)
-Monitor your vehicle’s health, track fuel levels and check important notifications on your phone (2)
-Manage your Lincoln Automotive Financial Services payments and more
Vehicle controls are available on the:
2018: Lincoln MKC, Lincoln MKZ, Lincoln MKZ HEV, Lincoln Continental, Lincoln MKX, Lincoln Navigator
2019: MKC
