Teachme Check routinely collects vulnerability information for the software and Library it uses, regardless of whether such vulnerabilities have been reported in the news, and takes necessary measures when an impact is identified.
When a vulnerability in widely used software or a Library is reported in the news, Teachme Check also assesses any potential impact under the same framework, and takes measures if an impact is identified.
Addressing Vulnerabilities
A mechanism is in place to detect vulnerabilities in the application code, and developers are notified each time a vulnerability is discovered.
Based on the detected vulnerability and its potential impact on our service, we assess on a case-by-case basis whether a response is necessary and determine its priority. If an impact is identified, we take measures such as upgrading the Library Version.
For details on vulnerability management, please refer to the applicable manual.
▼Is there a defined vulnerability management process and patch application frequency?
https://help.check.teachme.jp/hc/en-us/articles/61558154742041
Notifications When an Impact Is Identified
If there is an impact on your use of Teachme Check, our Customer Success representative will contact the person in charge via email or other means, and we will also provide Information through the Information bar within Teachme Check and through the Help Center Information.
If there is an impact on service operation, we will also post an update on the Status page.
Please note that, as a general rule, we do not provide individual notifications for vulnerabilities that have been confirmed to have no impact on Teachme Check.
▼Teachme Series Status Page
https://status.teachme.jp/
▼How will I be notified when an outage or incident occurs?
https://help.check.teachme.jp/hc/en-us/articles/61558210892569
Disclosure of Software in Use
From an information Security perspective, please note that, as a general rule, we do not disclose the programming languages, middleware, Library Versions, or internal system configurations used in Teachme Check.
----
Related:
Studist's Security Policy
https://studist.jp/security/