Timeline for Raised concerns about a security vulnerability to various managers, for more than a year, with no results. Should I mention it to external auditors?
Current License: CC BY-SA 4.0
3 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Nov 16, 2019 at 4:27 | comment | added | Zach Lipton | I like this answer. Someone is in charge of user accounts and permissions for the system (or if no specific person has been designated as in charge, someone nominally maintains the database system). You want to talk to that person about whether a particular account should be given more limited permissions (or a separate limited account created, if multiple processes are using the same one). So file a ticket that the appropriate person will see. If making account changes like this requires documentation or approval or some other process at your company, that person should know what's required. | |
| Nov 15, 2019 at 5:40 | review | First posts | |||
| Nov 15, 2019 at 7:33 | |||||
| Nov 15, 2019 at 5:39 | history | answered | Numeron | CC BY-SA 4.0 |