Responsible disclosure
How to report a security issue in a CEVA EFL digital service.
If you believe you have found a security issue in a CEVA EFL website or digital service, we want to hear about it.
In scope: efl.africa and its subdomains, efl.ng, and the myEFL customer portal. CEVA Logistics and CMA CGM Group systems are covered by the group programme at vdp.cma-cgm.com.
Email kelvin.abuah@cevalogistics.com with "Security report" in the subject. Include the affected address, the steps to reproduce the issue, what you could see or change, and how to reach you. Please do not send other people's personal data.
When testing, use only your own accounts and data. Do not access, change or delete information that is not yours, disrupt our services, run denial-of-service or high-volume automated tests, or use social engineering or physical attacks.
Give us reasonable time to investigate and fix the issue before you share it publicly.
We will acknowledge your report, keep you informed of progress and tell you when the issue is fixed. We do not currently pay for reports.
What this notice covers
- What is in scope
- How to report and what to include
- What to expect after a report