[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: HP's policy on CVE assignments

To: Kurt Seifried <kurt@seifried.org>
Subject: Re: HP's policy on CVE assignments
From: "Adinolfi, Daniel R" <dadinolfi@mitre.org>
Date: Tue, 11 Apr 2017 14:32:57 +0000
Accept-language: en-US
Authentication-results: spf=none (sender IP is 129.83.29.2) smtp.mailfrom=LISTS.MITRE.ORG; mitre.mail.onmicrosoft.com; dkim=none (message not signed) header.d=none;mitre.mail.onmicrosoft.com; dmarc=none action=none header.from=mitre.org;
Cc: cve-editorial-board-list <cve-editorial-board-list@lists.mitre.org>
Delivery-date: Tue Apr 11 11:04:59 2017
In-reply-to: <CABqVa39vYHmrgXUnE=Q13m0gFdLMGkWEaXE=jxg5goTsfq3xHQ@mail.gmail.com>
List-help: <mailto:LISTSERV@LISTS.MITRE.ORG?body=INFO%20CVE-EDITORIAL-BOARD-LIST>
List-owner: <mailto:CVE-EDITORIAL-BOARD-LIST-request@LISTS.MITRE.ORG>
List-subscribe: <mailto:CVE-EDITORIAL-BOARD-LIST-subscribe-request@LISTS.MITRE.ORG>
List-unsubscribe: <mailto:CVE-EDITORIAL-BOARD-LIST-unsubscribe-request@LISTS.MITRE.ORG>
References: <alpine.LNX.2.00.1704071412390.19881@forced.attrition.org> <alpine.LNX.2.00.1704102158590.19881@forced.attrition.org> <A4893B6A-3D5D-4E5F-8157-C37708135FA7@mitre.org> <CABqVa39vYHmrgXUnE=Q13m0gFdLMGkWEaXE=jxg5goTsfq3xHQ@mail.gmail.com>
Sender: <owner-cve-editorial-board-list@lists.mitre.org>
Spamdiagnosticmetadata: 6cdb8bfc89744bd8bfee511e3e65aa05
Spamdiagnosticoutput: 1:2
Thread-index: AQHSr9OO3JPdmXr+bUyyw3bViRNyeqG/f6WAgABwTYCAAFBkgP//vfkA
Thread-topic: HP's policy on CVE assignments
User-agent: Microsoft-MacOutlook/f.20.0.170309

I have added this as another item on the Suggested Rules Changes tracking document.

https://github.com/CVEProject/docs/blob/cna-documents/cna/CNA%20Rules/CNA%20Rules%20Development/Suggested%20Rules%20Changes

-Dan

From: Kurt Seifried <kurt@seifried.org>
Date: Tuesday, April 11, 2017 at 10:29
To: "Adinolfi, Daniel R" <dadinolfi@mitre.org>
Cc: cve-editorial-board-list <cve-editorial-board-list@lists.mitre.org>
Subject: Re: HP's policy on CVE assignments

Just a note: it might be useful to go through the CNA docs and highlight some of the potentially undefined/problematic terms/phrases, e.g. "public disclosure" and so on is so that we can maybe define them better.

References:
- HP's policy on CVE assignments
  - From: jericho <jericho@attrition.org>
- Re: HP's policy on CVE assignments
  - From: jericho <jericho@attrition.org>
- Re: HP's policy on CVE assignments
  - From: "Adinolfi, Daniel R" <dadinolfi@mitre.org>
- Re: HP's policy on CVE assignments
  - From: Kurt Seifried <kurt@seifried.org>

Prev by Date: Re: HP's policy on CVE assignments
Next by Date: Microsoft CNA assignment issues for April
Previous by thread: Re: HP's policy on CVE assignments
Next by thread: Re: HP's policy on CVE assignments
Index(es):
- Date
- Thread