[
Date Prev
][
Date Next
][
Thread Prev
][
Thread Next
][
Date Index
][
Thread Index
]
Re: Regarding the Distributed Weakness Filing system
On 03/07/2016 08:53 PM, Kurt Seifried wrote:
> "The vendor declined to fix the vulnerability".
That one is jaw-dropping. By implication, if I refuse to fix it, you
can't mention it, discuss it, or issue an advisory about it? That's
obstructing vulnerability disclosure, and a way to stimulate full
disclosure by default for future issues.
Can MITRE please report how many times this reason is used?
Pascal
