Compliance

This is the Compliance demo. Every visitor shares this company, and it resets every night.

What you change here, everyone sees until the next reset. Email, payments, and the AI models are switched off.

Start your own trial
  • EU GDPR (2016)
  • ISO 27001:2022
  • NIS2
  • NIS2 Netherlands (Cbw, 2026)

Nothing found that matches the search criteria.
Start your own trial
SV
Sam de Vries
sam.devries@tidewell-it.example
Legal

Remediation

TSK-1005 - Last updated Done
Edit

Owner

Hans Overbeek

Assignee

Roos van Beek

Recorded date

Correct recorded date

Created by

Sam de Vries

Due

5/10/2026

Source

Vulnerability remediation

Related to

VUL-004 — Injection flaw in the legacy hosting control panel

About this Vulnerability

VUL-004 — Injection flaw in the legacy hosting control panel

The penetration test showed that a form field in the legacy hosting control panel passes its input straight to the database. With a crafted value the tester read account records of other hosting customers. Few customers still use the panel, but the data is theirs.

Remediation

On track
Remediation action taken
Loading...

The form field now passes through a strict input filter, and the few customers still on the panel were told about the change. The panel stays on the decommissioning list.

    Are you sure?

    This action cannot be reverted.

    Leave this page?

    Your changes on this form are not saved. If you leave, they are lost.