[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Regarding the Distributed Weakness Filing system

On 03/07/2016 08:53 PM, Kurt Seifried wrote:
> "The vendor declined to fix the vulnerability".

That one is jaw-dropping.  By implication, if I refuse to fix it, you 
can't mention it, discuss it, or issue an advisory about it?  That's 
obstructing vulnerability disclosure, and a way to stimulate full 
disclosure by default for future issues.

Can MITRE please report how many times this reason is used?

Pascal
Page Last Updated or Reviewed: March 09, 2016