Re: CD PROPOSAL: INCLUSION - Interim Decision 8/23

[Pascal Meunier <pmeunier@purdue.edu>]

MODIFY

Please define "active voters";  is it those who voted in the last month,
last week, on this one candidate, or those designated as "voting members of
the board"?   Remove the looseness in item 4 about "preferably" -- I would
suggest that 2 is enough (if they are board members, they should know their
subject?),  but I don't really care as long as the rules are
straightforward and no dispute can ensue from any vagueness about them.

Pascal
(hoping I'm not being too much of a pain -- just trying to do a good job)


>Please vote on this pervasive content decision using the space
>provided below.
>
>
>Content Decision: INCLUSION (What to include in the CVE)
>--------------------------------------------------------
>
>VOTE:
>
>(Member may vote ACCEPT, MODIFY, REJECT, or NOOP.)
>
>
>A candidate vulnerability may be included in the CVE if all of the
>following conditions hold:
>
>1) It satisfies the CVE vulnerability definition
>
>2) It does not satisfy any Exception (see other content decisions)
>
>3) At least 50% of active voting members vote to ACCEPT or MODIFY the
>candidate
>
>4) At least 2 non-MITRE members from different organizations vote on
>the candidate, preferably 3.  If there are more than 5 active voters,
>then 75% of active voters will be preferred.