Re: Sources: Full and Partial Coverage

[Art Manion <amanion@cert.org>]

On 5/4/12 5:59 PM, Mann, Dave wrote:

> SHOULD BE FULLY COVERED
> -----------------------

This might already be addressed, but all CNAs should be fully covered.

Presumably, a CNA is doing a decent job and a CVE from a CNA doesn't
need as much analysis and shakedown time?

I believe CVE already gives higher priority to CVE IDs that have been
reserved for CNA use when those IDs show up in public disclosures?


 - Art