Re: CVE Entry Quality Working Group

["Waltermire, David A. (Fed)" <david.waltermire@nist.gov>]

I think establishing this WG is a great idea. I'd be happy to participate.

Regards,
Dave

-------- Original Message --------
From: "Coffin, Chris" <ccoffin@mitre.org>
Date: Mon, November 26, 2018 9:32 AM -0500
To: CVE Editorial Board Discussion <cve-editorial-board-list@mitre.org>
Subject: CVE Entry Quality Working Group

Board Members,

 

The CVE team would like to judge your level of interest in establishing a CVE Entry Quality Working Group. The main focus of the group would be on improving the quality of CVE entry content. The output of the group would be best practices and guidelines on how to generate a CVE entry, and possibly propose changes to the CNA Rules. 

 

Example issues the group could cover include:

• Should the CVSS vector be allowed in a CVE Entry description?
• What is the best way to describe relationships between products (e.g. Product A bundles Product B)?
• If the only public data for two different vulnerabilities would result in an identical description, what should be done?

 

Would the Board be interested in establishing the CVE Entry Quality Working Group, and are any Board members interested in stepping up to be the chair? Please respond by Friday Nov 30.

 

The CVE Team