Re: Regarding the Distributed Weakness Filing system

[Pascal Meunier <pmeunier@cerias.purdue.edu>]

On 03/07/2016 08:53 PM, Kurt Seifried wrote:
> "The vendor declined to fix the vulnerability".

That one is jaw-dropping.  By implication, if I refuse to fix it, you 
can't mention it, discuss it, or issue an advisory about it?  That's 
obstructing vulnerability disclosure, and a way to stimulate full 
disclosure by default for future issues.

Can MITRE please report how many times this reason is used?

Pascal