What this record establishes
Scope capture
Published asset rows were captured. The full policy and eligibility were not individually reviewed.
Directory page 7 explicitly labels this Bug bounty program; full program policy not reviewed; no active/paused status shown.
Published asset scope
Snapshot captured 2026-10-03. Scope status: Captured.
| Asset | Type | Group / eligibility |
|---|---|---|
login.cm.comPublished location: http://login.cm.com | URL | Tier 1 |
*.ticketing.cm.com | Wildcard | Tier 2 |
api.cm.comPublished location: http://api.cm.com | URL | Tier 2 |
api.cmtelecom.comPublished location: http://api.cmtelecom.com | URL | Tier 2 |
cm.com/[locale]/app/* | Wildcard | Tier 2 |
cm.com/[locale]/registerPublished location: http://cm.com/[locale]/register | URL | Tier 2 |
appmiral.comPublished location: http://appmiral.com | URL | Tier 3 |
building-blocks.comPublished location: http://building-blocks.com | URL | Tier 3 |
cm.com/app/messagingtrial/Published location: http://cm.com/app/messagingtrial/ | URL | Tier 3 |
cmcom.atlassian.netPublished location: http://cmcom.atlassian.net | URL | Tier 3 |
https://github.com/cmdotcom | Other | Tier 3 |
www.cm.comPublished location: http://www.cm.com | URL | Tier 3 |
*.appmiral.com | Wildcard | No bounty |
*.cm.com | Wildcard | No bounty |
*.cmtelecom.com | Wildcard | No bounty |
1199521324Published location: https://apps.apple.com/app/1199521324 | iOS | No bounty |
1579530451Published location: https://apps.apple.com/app/1579530451 | iOS | No bounty |
com.cm.cashregisterPublished location: https://play.google.com/store/apps/details?id=com.cm.cashregister | Android | No bounty |
com.ticketflow.ticketscannerPublished location: https://play.google.com/store/apps/details?id=com.ticketflow.ticketscanner | Android | No bounty |
demo.globalticket.com/* | Wildcard | No bounty |
| Asset | Type | Group / eligibility |
|---|---|---|
| No rows captured. This does not establish that the program has no assets or restrictions. | ||
Capture limits
- Only the published asset table was captured; program rules and eligibility still require individual review.
Live policy and platform eligibility still require review.
Sources and collection identity
- Official program page Primary source · reviewed 2026-10-03
- Published scope source Primary source · reviewed 2026-10-03
Appears in Discovery, Bounty. No identity match is inferred from a shared company name.