CVE Board Meeting summary - 13 May 2020



Members of CVE Board in Attendance

Members of MITRE CVE Team in Attendance

Christine Deal

Jonathan Evans

Chris Levendis

3:30 – 3:40: Action items from the last meeting

3:50 – 4:00: Action items, wrap-up

4.29.02

Updating the CVE Board charter to address exceptions issues CVE board member voting.

Kent L.

Not Started

4.29.03

Set up 2-day test meeting so Board members can test MS Teams functionality.

Christine D. (MITRE)

OBE

  • Kent suggested that the CVE Board sponsor a workshop on automated vulnerability identification, target will be open source. This workshop would then expand our open source conversations as well. David suggested putting out a call for papers on this topic, like what Google submitted about OSS-Fuzz. The group agreed on the approaches.

CVE Board items voting priority

Open Source Project Champion

  • Katie explained she is getting a lot of questions regarding SQLite, about CVEs and disputes and that there is no champion for Open Source projects. The group agreed this topic needs to be further discussed at a future board meeting.

CVE Global Summit

Future discussion items

The group agreed that the following discussion items need to be added to a future CVE Board agenda.

5.13.02

Take the lead for developing a proposal about approach for automated vulnerability identification workshop that includes an initial target participant list, and report back to next CVE Board Meeting on May 27, 2020.

Kent L. (McAfee)

Not Started

5.13.03

Add future discussion items from May 13, 2020 CVE Board meeting to future agenda (Open source project discussion and sponsor liaison)

Chris L. (MITRE)

Not Started




Previous Email: New CNA - NortonLifeLock Inc.,

Next Email: New CNA - OpenVPN Inc.

May 2020 Email Index