4 ms·
Yes, please, tell all those auditors, security scanner vendors and journalists that they should treat CVEs with this knowledge. That having report with "1 criti
by 112233 3y ago
Yes, please, tell all those auditors, security scanner vendors and journalists that they should treat CVEs with this knowledge. That having report with "1 critical vulnerability (CVE-2082-555) !!!!" does not mean that you have a security problem, and your equipment vendor has to drop everything and go fix that.
You are telling me what CVE is.
I am telling you what the effect of having CVE is.
- msm_ 3y agoI mean, do tell them that because you're right. CVEs are not broken, your auditors, security scanner vendors and journalists are. Sounds like if you replace CVEs with another system you'll get exactly the same mess.