Skip to content

Add the assigning CNA to the required information for an entry submission #12

Open

Description

@EvansJonathan

GOAL: Track who reserved what CVE IDs.
CHANGE: Should the original reservation entity or reservation chain be added to required data?
OUTCOME: Regardless of the assigner, the entire Sub CNA/Root CNA chain of CVE ID reservations will be included in each CVE entry.

Activity

  1. changed the title [-]Add the assigning CNA in the required information for a submission[/-] [+]Add the assigning CNA to the required information for an entry submission[/+] on Jul 21, 2017
  2. kurtseifried commented on Aug 22, 2017

    @kurtseifried

    +1. DWF includes the actual CVE Mentor that assigned it (e.g. an individual like "bobsmith@some.tld" or "security@example.org" where security@example.org is then expected to keep internal records).

  3. dadinolfi commented on Oct 5, 2017

    @dadinolfi
    Contributor

    Suggestion: Make [ASSIGNINGCNA] a required field. Add [ASSIGNINGCNA] to Appendix B including this description:

    The [ASSIGNING CNA]: field should include the name of the assigning CNA. CNAs should use a consistent name to facilitate searches for CVE IDs that originate from them.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions