3 ms·
> the vendor must acknowledge it as one or respond explaining why it is not. Huh? So what happens when they do neither?
by jwilk 4y ago
> the vendor must acknowledge it as one or respond explaining why it is not.
Huh? So what happens when they do neither?
- _8j50 4y agoYou release a PoC and try to get mitre or whoever maintains the system to override the vendor if it is serious enough.
- rurban 4y agoAnd then you can argue with Mitte about their wrong CVE's. I got plenty of garbage CVE's for development versions, which were never released, marked them as invalid CVE, but they are still in the CVE database. Mitre doesn't care, the reporter doesn't care, and I don't care neither.