Posted by Art Manion via Fulldisclosure on Jan 10
Hi,
CVE IDs *can* be assigned for SaaS or similarly “cloud only” software. For a period of time, there was a restriction
that only the provider could make or request such an assignment. But the current CVE rules remove this restriction:
4.2.3 CNAs MUST NOT consider the type of technology (e.g., cloud, on-premises, artificial intelligence, machine
learning) as the sole basis for determining assignment.
It would have been…
– Read More – Full Disclosure
