Instruction: Per the engineers they will only accept findings that allow modification from the dashboard user to the admin role. Having read access with no ability to write/update/delete will not be accepted as a vulnerablity.
Integrity requirements: low
Max severity: medium
Asset identifier: *bearflagrobotics.com
Asset type: URL
Availability requirement:
Confidentiality requirement:
Eligible for bounty:
Eligible for submissions: true
Instruction:
Integrity requirements:
Max severity: critical
Asset identifier: *bluerivertechnology.com
Asset type: URL
Availability requirement:
Confidentiality requirement:
Eligible for bounty:
Eligible for submissions: true
Instruction:
Integrity requirements:
Max severity: critical
Asset identifier: *deere.com
Asset type: URL
Availability requirement:
Confidentiality requirement:
Eligible for bounty:
Eligible for submissions: true
Instruction:
Integrity requirements:
Max severity: critical
Asset identifier: *deere.com*
Asset type: OTHER
Availability requirement:
Confidentiality requirement:
Eligible for bounty:
Eligible for submissions: true
Instruction:
Integrity requirements:
Max severity: critical
Asset identifier: *jdisonline.com
Asset type: URL
Availability requirement:
Confidentiality requirement:
Eligible for bounty:
Eligible for submissions: true
Instruction:
Integrity requirements:
Max severity: critical
Asset identifier: *jdisonsite.com
Asset type: URL
Availability requirement:
Confidentiality requirement:
Eligible for bounty:
Eligible for submissions: true
Instruction:
Integrity requirements:
Max severity: critical
Asset identifier: *johndeere.com
Asset type: URL
Availability requirement:
Confidentiality requirement:
Eligible for bounty:
Eligible for submissions: true
Instruction:
Integrity requirements:
Max severity: critical
Asset identifier: *johndeerecloud.com
Asset type: URL
Availability requirement:
Confidentiality requirement:
Eligible for bounty:
Eligible for submissions: true
Instruction:
Integrity requirements:
Max severity: critical
Asset identifier: *johndeeretechinfo.com
Asset type: URL
Availability requirement:
Confidentiality requirement:
Eligible for bounty:
Eligible for submissions: true
Instruction:
Integrity requirements:
Max severity: critical
Asset identifier: *promotemyprograms*.deere.com
Asset type: OTHER
Availability requirement: low
Confidentiality requirement: low
Eligible for bounty:
Eligible for submissions: true
Instruction:
Integrity requirements: low
Max severity: medium
Asset identifier: *starfirenetwork.com
Asset type: URL
Availability requirement:
Confidentiality requirement:
Eligible for bounty:
Eligible for submissions: true
Instruction:
Integrity requirements:
Max severity: critical
Asset identifier: *wirtgen-group.com
Asset type: URL
Availability requirement:
Confidentiality requirement:
Eligible for bounty:
Eligible for submissions: true
Instruction:
Integrity requirements:
Max severity: critical
Asset identifier: .adzone.deere.com
Asset type: OTHER
Availability requirement: low
Confidentiality requirement: low
Eligible for bounty:
Eligible for submissions: true
Instruction:
Integrity requirements: low
Max severity: medium
Asset identifier: 1104383066
Asset type: APPLE_STORE_APP_ID
Availability requirement:
Confidentiality requirement:
Eligible for bounty:
Eligible for submissions: true
Instruction:
Integrity requirements:
Max severity: critical
Asset identifier: 1498206477
Asset type: APPLE_STORE_APP_ID
Availability requirement:
Confidentiality requirement:
Eligible for bounty:
Eligible for submissions: true
Instruction:
Integrity requirements:
Max severity: critical
Asset identifier: 958749681
Asset type: APPLE_STORE_APP_ID
Availability requirement:
Confidentiality requirement:
Eligible for bounty:
Eligible for submissions: true
Instruction:
Integrity requirements:
Max severity: critical
Asset identifier: allpartsstore.com
Asset type: URL
Availability requirement: high
Confidentiality requirement: high
Eligible for bounty:
Eligible for submissions: true
Instruction:
Integrity requirements: high
Max severity: critical
Asset identifier: app.spark.ai
Asset type: URL
Availability requirement: high
Confidentiality requirement: high
Eligible for bounty:
Eligible for submissions: true
Instruction:
Integrity requirements: high
Max severity: critical
Asset identifier: com.deere.equipmentplus
Asset type: GOOGLE_PLAY_APP_ID
Availability requirement:
Confidentiality requirement:
Eligible for bounty:
Eligible for submissions: true
Instruction:
Integrity requirements:
Max severity: critical
Asset identifier: com.deere.myoperations
Asset type: GOOGLE_PLAY_APP_ID
Availability requirement:
Confidentiality requirement:
Eligible for bounty:
Eligible for submissions: true
Instruction:
Integrity requirements:
Max severity: critical
Asset identifier: deere.africa
Asset type: URL
Availability requirement:
Confidentiality requirement:
Eligible for bounty:
Eligible for submissions: true
Instruction:
Integrity requirements:
Max severity: critical
Asset identifier: harvestprofit.com
Asset type: URL
Availability requirement: high
Confidentiality requirement: high
Eligible for bounty:
Eligible for submissions: true
Instruction:
Integrity requirements: high
Max severity: critical
Asset identifier: johndeere.archivea.com
Asset type: URL
Availability requirement: none
Confidentiality requirement: low
Eligible for bounty:
Eligible for submissions: true
Instruction: Deere Branding does not consider this to be high/critical impact to company. This is third party hosted.
2023-01-25
lowering the risk to low by request of the Branding Team.
Integrity requirements: none
Max severity: low
Asset identifier: kreiselelectric.com
Asset type: URL
Availability requirement: low
Confidentiality requirement: high
Eligible for bounty:
Eligible for submissions: true
Instruction:
Integrity requirements: medium
Max severity: critical
Asset identifier: parts.deere.africa
Asset type: URL
Availability requirement:
Confidentiality requirement:
Eligible for bounty:
Eligible for submissions: true
Instruction:
Integrity requirements:
Max severity: critical
Asset identifier: sandbox.spark.ai
Asset type: URL
Availability requirement: high
Confidentiality requirement: high
Eligible for bounty:
Eligible for submissions: true
Instruction:
Integrity requirements: high
Max severity: critical
Asset identifier: spark.ai
Asset type: URL
Availability requirement: high
Confidentiality requirement: high
Eligible for bounty:
Eligible for submissions: true
Instruction: SparkAI combines people and technology to resolve AI edge cases, false positives, and other exceptions encountered live in production, so you can launch & scale automation products faster than ever.
