CVE Automation Working Group Recommendation - 01-17-2017

To: "cve-editorial-board-list@lists.mitre.org" <cve-editorial-board-list@lists.mitre.org>
Subject: CVE Automation Working Group Recommendation - 01-17-2017
From: "Booth, Harold (Fed)" <harold.booth@nist.gov>
Date: Thu, 19 Jan 2017 14:52:30 +0000
Accept-language: en-US
Authentication-results: spf=none (sender IP is 129.83.29.3) smtp.mailfrom=LISTS.MITRE.ORG; mitre.mail.onmicrosoft.com; dkim=none (message not signed) header.d=none;mitre.mail.onmicrosoft.com; dmarc=none action=none header.from=nist.gov;mitre.org; dkim=none (message not signed) header.d=none;
Delivery-date: Thu Jan 19 12:11:16 2017
List-help: <mailto:LISTSERV@LISTS.MITRE.ORG?body=INFO%20CVE-EDITORIAL-BOARD-LIST>
List-owner: <mailto:CVE-EDITORIAL-BOARD-LIST-request@LISTS.MITRE.ORG>
List-subscribe: <mailto:CVE-EDITORIAL-BOARD-LIST-subscribe-request@LISTS.MITRE.ORG>
List-unsubscribe: <mailto:CVE-EDITORIAL-BOARD-LIST-unsubscribe-request@LISTS.MITRE.ORG>
Sender: <owner-cve-editorial-board-list@lists.mitre.org>
Spamdiagnosticmetadata: 6cdb8bfc89744bd8bfee511e3e65aa05
Spamdiagnosticoutput: 1:2
Thread-index: AdJyY5hm2VzzqtghRBWv7ty1wdnyEg==
Thread-topic: CVE Automation Working Group Recommendation - 01-17-2017

Proposed Recommendation

A working draft of the JSON format will be put forth on January 31^st followed by a 30-day comment period. The working draft will start from the schema currently at https://github.com/distributedweaknessfiling/DWF-Documentation/blob/master/JSON-file-format-v4.md and will be published at https://github.com/CVEProject/automation-working-group/tree/master/cve_json_schema. At the end of the comment period after addressing any comments, a final version will be produced that will be used by MITRE and the CNAs for the purpose of receiving CNA submissions. Work will continue to evolve the format to address additional use cases.

Response Period: One Week: January 26, 2017

Follow-Ups:
- Re: CVE Automation Working Group Recommendation - 01-17-2017
  - From: Kurt Seifried <kseifried@redhat.com>