2 ms·

Damn, dunno why I've always assumed that if something gets a CVE, then some authority has reproduced and verified it. Shouldn't it be CNA's job? Why would anyt

by oxydite 2mo ago

Damn, dunno why I've always assumed that if something gets a CVE, then some authority has reproduced and verified it. Shouldn't it be CNA's job? Why would anything get a number if it hadn't been verified?

insanitybit 2mo ago
The current system is radically overwhelmed and has been seeing cuts over the last few years. > then some authority has reproduced and verified it. No, the system puts a lot of trust into the submitter.
inigyou 2mo ago
It's really just a number allocation and that's all. You can get a number. That doesn't mean the number refers to something useful.