HITB2016AMS

MITRE's bug pilot program fix 'indefinitely' shelved amid criticism

A pilot project launched by vulnerability handler MITRE to address stagnation in the assignment of bug identification numbers has been shelved less than a day after its announcement and before its scheduled launch today.

The pilot was devised in response to complaints by security researchers and MITRE board members about the stalled allocation of CVE numbers.

As detailed by The Register, dozens of security researchers have struggled to gain Common Vulnerabilities and Exposures (CVE) numbers for their discovered vulnerabilities in what they say impacts broader security. The MITRE website now bears a warning to visitors that it is experiencing "unprecedented demand for vulnerability IDs" and that it will work with the editorial board for a solution.

Tags: