|
|
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
example of CVE/service cross over
- To: cve-editorial-board-list <cve-editorial-board-list@lists.mitre.org>
- Subject: example of CVE/service cross over
- From: Kurt Seifried <kseifried@redhat.com>
- Date: Wed, 6 Sep 2017 14:02:17 -0600
- Authentication-results: spf=none (sender IP is 129.83.29.2) smtp.mailfrom=LISTS.MITRE.ORG; mitre.mail.onmicrosoft.com; dkim=none (message not signed) header.d=none;mitre.mail.onmicrosoft.com; dmarc=fail action=none header.from=redhat.com;
- Delivery-date: Wed Sep 6 16:20:16 2017
- List-help: <mailto:LISTSERV@LISTS.MITRE.ORG?body=INFO%20CVE-EDITORIAL-BOARD-LIST>
- List-owner: <mailto:CVE-EDITORIAL-BOARD-LIST-request@LISTS.MITRE.ORG>
- List-subscribe: <mailto:CVE-EDITORIAL-BOARD-LIST-subscribe-request@LISTS.MITRE.ORG>
- List-unsubscribe: <mailto:CVE-EDITORIAL-BOARD-LIST-unsubscribe-request@LISTS.MITRE.ORG>
- Sender: <owner-cve-editorial-board-list@lists.mitre.org>
- Spamdiagnosticmetadata: 5952c28dcc454f0789fb433d26f936ef
- Spamdiagnosticoutput: 1:2
An online service that requires use of a specific out of date plugin/technology (e.g. Flash/Java) to work, I know this is covered by CVE typically, but it would be nice to know for example "service X requires you to do dangerous thing (install 10 year old java)" in some formal way.
--
Kurt Seifried -- Red Hat -- Product Security -- Cloud
PGP A90B F995 7350 148F 66BF 7554 160D 4553 5E26 7993
Red Hat Product Security contact: secalert@redhat.com
Kurt Seifried -- Red Hat -- Product Security -- Cloud
PGP A90B F995 7350 148F 66BF 7554 160D 4553 5E26 7993
Red Hat Product Security contact: secalert@redhat.com
- Prev by Date: Agenda for CVE Board Meeting September 6
- Next by Date: New CNA - Riverbed
- Previous by thread: Agenda for CVE Board Meeting September 6
- Next by thread: New CNA - Riverbed
- Index(es):