Re: DWF CVE ID Descriptive Content

[Kurt Seifried <kseifried@redhat.com>]

One note:

I just had anagawat@fb.com accept the CVE Terms of Use, but he requested the CVE as anagawat+cve@fb.com email alias. I don't want us to have to get into the realms of email address normalization (+foo, dots in gmail addresses, etc.). So I'm going to update the DWF Database to reflect the correct email, and in future the confirmation of acceptance of MITRE CVE ToU will contain a GUID so I can say with certainty for example that the email was sent to foo@example.org and despite coming back "from" something@example.org it is indeed legitimate for foo@example.org. 

On Thu, Oct 6, 2016 at 11:02 AM, Coffin, Chris <ccoffin@mitre.org> wrote:

All,

As we discussed in the board call yesterday, we have turned on the descriptive content within the DWF CNA data stream. An example of a complete DWF-assigned and populated CVE ID is referenced below.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1000000

The descriptive content for these CVE IDs is authored by DWF CNA. As such, the descriptive content can look quite a bit different from the content traditionally developed by MITRE. Please let us know if you have any suggestions or concerns, and we will work with the DWF CNA as appropriate.

The complete list of populated DWF CVE IDs is as follows:

 

CVE-2015-1000000

CVE-2015-1000001

CVE-2015-1000002

CVE-2015-1000003

CVE-2015-1000004

CVE-2015-1000005

CVE-2015-1000006

CVE-2015-1000007

CVE-2015-1000008

CVE-2015-1000009

CVE-2015-1000010

CVE-2015-1000011

CVE-2015-1000012

CVE-2015-1000013

CVE-2016-1000000

CVE-2016-1000009

CVE-2016-1000014

CVE-2016-1000217

 

 

Chris Coffin

The CVE Team

--

--
Kurt Seifried -- Red Hat -- Product Security -- Cloud
PGP A90B F995 7350 148F 66BF 7554 160D 4553 5E26 7993
Red Hat Product Security contact: secalert@redhat.com