Dashlane

target_in_scope

asset_identifier asset_type availability requirement confidentiality requirement eligible for bounty eligible for submission integrity requirement max_severity
9pp8m6lpfkgf WINDOWS_APP_STORE_APP_ID high high high critical
It's the standalone edge extension https://www.microsoft.com/en-us/store/p/dashlane-password-manager/9pp8m6lpfkgf
Standalone Chrome extension OTHER high high high critical
The standalone extension is available here : https://chrome.google.com/webstore/detail/dashlane-password-manager/fdjamakpfbbddfjaooikfcpapjohcfmg
app.dashlane.com URL critical
com.dashlane GOOGLE_PLAY_APP_ID high high high critical
com.dashlane.dashlanephonefinal APPLE_STORE_APP_ID high high high critical
console.dashlane.com URL critical
https://www.dashlane.com/fr/directdownload-v2?os=OS_X_10_12_6&platform=website&target=launcher_macosx DOWNLOADABLE_EXECUTABLES high high high critical
Our OSX installer
https://www.dashlane.com/fr/directdownload-v2?os=none&platform=website&target=archive_win DOWNLOADABLE_EXECUTABLES high high high critical
Our windows installer
logs.dashlane.com URL critical
ws1.dashlane.com URL critical
www.dashlane.com URL critical
SSO_Saml_connector SOURCE_CODE medium high high critical
https://support.dashlane.com/hc/en-us/articles/360014277880-Setting-up-the-SSO-Connector

target_out_of_scope

asset_identifier asset_type availability requirement confidentiality requirement eligible for bounty eligible for submission integrity requirement max_severity