Marriott Vulnerability Disclosure Program

target_in_scope

asset_identifier asset_type availability requirement confidentiality requirement eligible for bounty eligible for submission integrity requirement max_severity
*.marriott.com URL critical
flagship domain
*.starwoodhotels.com URL medium medium medium critical
Starwood Hotels and Resorts Flagship domain
455004730 APPLE_STORE_APP_ID critical
com.marriott GOOGLE_PLAY_APP_ID critical
eleganthotels.com URL critical
www.ritzcarlton.com URL low low low medium
This domain is for static browsing of the brands hotels. All login functionality and data transfer is handled through marriott.com

target_out_of_scope

asset_identifier asset_type availability requirement confidentiality requirement eligible for bounty eligible for submission integrity requirement max_severity