Summary

The process of reporting security bugs against another companys software is controversial . Some people advocate immediate public disclosure, whereas others support notifying the vendor before public disclosure. Responsible disclosure is a process in which the bug finder and software vendor work together so that a fix is available to customers before the bug is publicly disclosed. For internally reported bugs in your products, special care must be taken to fix the reported bug properly and all related bugs, and to ensure this type of issue is prevented in the future.