RE: question on a 'half-duplicate' assignment

["Coffin, Chris" <ccoffin@mitre.org>]

Kurt,

No need to REJECT this one. Just remove "drp_action parameter to 
data_sources.php" from CVE-2017-1000032 and replace it with "NOTE: The 
drp_action parameter to data_sources.php vector is already covered by 
CVE-2014-4002."

You can see an example of this in CVE-2015-2563 (or do a keyword search 
for "covered").

Regards,

Chris

-----Original Message-----
From: owner-cve-editorial-board-list@lists.mitre.org 
[mailto:owner-cve-editorial-board-list@lists.mitre.org] On Behalf Of 
jericho
Sent: Thursday, July 20, 2017 7:11 PM
To: cve-editorial-board-list <cve-editorial-board-list@lists.mitre.org>
Subject: question on a 'half-duplicate' assignment
Importance: High

Info and thread, where Kurt and I briefly discuss it. He'd like to get 
MITRE's take on how to handle this. Further, if this is not documented 
in the appropriate documentation, it should be added. While it doesn't 
happen too often, it does happen consistently.

https://github.com/distributedweaknessfiling/DWF-CVE-Database/issues/27#issuecomment-316860210

Brian