Re: HP's policy on CVE assignments

["Adinolfi, Daniel R" <dadinolfi@mitre.org>]

I have added this as another item on the Suggested Rules Changes tracking document.

 

https://github.com/CVEProject/docs/blob/cna-documents/cna/CNA%20Rules/CNA%20Rules%20Development/Suggested%20Rules%20Changes

 

-Dan

 

From: Kurt Seifried <kurt@seifried.org>
Date: Tuesday, April 11, 2017 at 10:29
To: "Adinolfi, Daniel R" <dadinolfi@mitre.org>
Cc: cve-editorial-board-list <cve-editorial-board-list@lists.mitre.org>
Subject: Re: HP's policy on CVE assignments

 

Just a note: it might be useful to go through the CNA docs and highlight some of the potentially undefined/problematic terms/phrases, e.g. "public disclosure" and so on is so that we can maybe define them better.