[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

An interesting data point

To: cve-editorial-board-list <cve-editorial-board-list@lists.mitre.org>
Subject: An interesting data point
From: Kurt Seifried <kseifried@redhat.com>
Date: Mon, 4 Dec 2017 22:07:38 -0700
Authentication-results: spf=none (sender IP is 198.49.146.235) smtp.mailfrom=LISTS.MITRE.ORG; imc.mitre.org; dkim=none (message not signed) header.d=none;imc.mitre.org; dmarc=fail action=none header.from=redhat.com;
Delivery-date: Tue Dec 5 07:46:21 2017
List-help: <mailto:LISTSERV@LISTS.MITRE.ORG?body=INFO%20CVE-EDITORIAL-BOARD-LIST>
List-owner: <mailto:CVE-EDITORIAL-BOARD-LIST-request@LISTS.MITRE.ORG>
List-subscribe: <mailto:CVE-EDITORIAL-BOARD-LIST-subscribe-request@LISTS.MITRE.ORG>
List-unsubscribe: <mailto:CVE-EDITORIAL-BOARD-LIST-unsubscribe-request@LISTS.MITRE.ORG>
Sender: <owner-cve-editorial-board-list@lists.mitre.org>
Spamdiagnosticmetadata: 5952c28dcc454f0789fb433d26f936ef
Spamdiagnosticoutput: 1:2

So from the current crop of CVE requests the DWF got:

 7 BAD:DESCRIPTION
   8 BAD:DESCRIPTION:MISSING:DETAILS
  23 BAD:DESCRIPTION:MISSING:PRODUCT,BAD:DESCRIPTION:MISSING:VERSION
  19 BAD:DESCRIPTION:MISSING:VERSION
   1 BAD:MULTIPLE_ISSUES
  11 BAD:REF_URL
   1 
BAD:REF_URL,BAD:DESCRIPTION:MISSING:VERSION,BAD:DESCRIPTION:MISSING:PRODUCT
   2 BAD:VULN_TYPE
   1 NEEDINFO
 153 OK

The status codes are at
https://github.com/distributedweaknessfiling/DWF-Documentation/blob/master/DWF-STATUS-ERROR-CODES-for-CVE-requests.md
but should be pretty self evident. The good news is that a lot of
these can be fixed without to much work, but I definitely need to
figure out how to help people make better requests/write the
descriptions (or auto generate them.. I think that's the way to go).


-- 

Kurt Seifried -- Red Hat -- Product Security -- Cloud
PGP A90B F995 7350 148F 66BF 7554 160D 4553 5E26 7993
Red Hat Product Security contact: secalert@redhat.com

Follow-Ups:
- Re: An interesting data point
  - From: jericho <jericho@attrition.org>

Prev by Date: Re: Scott Moore of IBM Voted in as CVE Board Member
Next by Date: Re: An interesting data point
Previous by thread: Re: Scott Moore of IBM Voted in as CVE Board Member
Next by thread: Re: An interesting data point
Index(es):
- Date
- Thread