[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: CVE-CNA JSON Format Proposal

To: "Booth, Harold (Fed)" <harold.booth@nist.gov>, "cve-editorial-board-list@lists.mitre.org" <cve-editorial-board-list@LISTS.MITRE.ORG>
Subject: Re: CVE-CNA JSON Format Proposal
From: Art Manion <amanion@cert.org>
Date: Wed, 22 Mar 2017 15:34:52 -0400
Authentication-results: spf=none (sender IP is 129.83.29.2) smtp.mailfrom=LISTS.MITRE.ORG; mitre.mail.onmicrosoft.com; dkim=none (message not signed) header.d=none;mitre.mail.onmicrosoft.com; dmarc=none action=none header.from=cert.org;
Delivery-date: Wed Mar 22 15:56:41 2017
Dkim-filter: OpenDKIM Filter v2.11.0 taper.sei.cmu.edu v2MJYsFM028115
In-reply-to: <CY4PR09MB1255F37BD20E03336BDE025AE63D0@CY4PR09MB1255.namprd09.prod.outlook.com>
List-help: <mailto:LISTSERV@LISTS.MITRE.ORG?body=INFO%20CVE-EDITORIAL-BOARD-LIST>
List-owner: <mailto:CVE-EDITORIAL-BOARD-LIST-request@LISTS.MITRE.ORG>
List-subscribe: <mailto:CVE-EDITORIAL-BOARD-LIST-subscribe-request@LISTS.MITRE.ORG>
List-unsubscribe: <mailto:CVE-EDITORIAL-BOARD-LIST-unsubscribe-request@LISTS.MITRE.ORG>
References: <CY4PR09MB1255F37BD20E03336BDE025AE63D0@CY4PR09MB1255.namprd09.prod.outlook.com>
Sender: <owner-cve-editorial-board-list@lists.mitre.org>
Spamdiagnosticmetadata: 6cdb8bfc89744bd8bfee511e3e65aa05
Spamdiagnosticoutput: 1:2
User-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:45.0) Gecko/20100101 Thunderbird/45.8.0

On 3/21/17 9:36 AM, Booth, Harold (Fed) wrote:

> The working group is proposing that the format available at
> https://github.com/CVEProject/automation-working-group/blob/master/cve_json_schema/DRAFT-JSON-file-format-v4.md
> be used as the structured format for CNAs to submit CVE information
> effective as soon as the this recommendation has been accepted by the 
> board.

I consider my ASSIGNER question to be a non-accepting issue (pending
further discussion).

A couple other issues that can wait for further revisions:

1. Use of vxref for references in CVE:

https://github.com/FIRSTdotorg/vrdx-sig-vxref-wip/blob/master/vxref/schema/vxref_schema_03.json

2. Assuming CVSS-SIG produces a CVSSv3 JSON spec, include that as an
extended/optional part of the CVE spec.

 - Art

References:
- CVE-CNA JSON Format Proposal
  - From: "Booth, Harold (Fed)" <harold.booth@nist.gov>

Prev by Date: Re: CVE-CNA JSON Format Proposal
Next by Date: Re: CVE-CNA JSON Format Proposal
Previous by thread: Re: CVE-CNA JSON Format Proposal
Next by thread: Agenda for CVE Board Meeting March 22 (Wednesday)
Index(es):
- Date
- Thread