Public
- Public
- Network
- Groups
- Featured
- Popular
- People

Conversation

Notices

Embed this notice
Will Dormann (wdormann@infosec.exchange)'s status on Tuesday, 06-Feb-2024 00:59:07 JST Will Dormann
- Kevin Beaumont
@GossiTheDog
Counterpoint:
https://infosec.exchange/@seajay/111879635522838535
Vendors allowed to assign new CVEs to old vulnerabilities gives them the ability to hide their negligence in keeping their software up to date. 🤔
In conversation about 10 months ago from infosec.exchange permalink
Attachments
1. No result found on File_thumbnail lookup.
  
  chris farrell (@seajay@infosec.exchange)
  
  from chris farrell
  
  @wdormann Assigning a new CVE to an old vuln is like claiming the emperor without clothes is wearing a “new” outfit this Tuesday, ignoring the fact that he’s been parading the same non-outfit for a year. This practice is an attempt to get out of addressing and resolving underlying vulnerabilities directly, instead relying on obfuscating the issue with a superficial, redundant label.

Feeds