top | item 44958188

(no title)

thombles | 6 months ago

Is there value in requesting a CVE for a service that only Microsoft runs? What's a user supposed to do with that?

discuss

order

fulafel|6 months ago

CVEs are supposed to be unambigous references to vulnerabilities for communication, nothing more. So you can say stuff like "this happened was before CVE-XXXX was fixed, do we need to notify anyone about the risk of undetected insider info access?"