The Value of Assigning CVEs

Shannon Sabens of CrowdStrike chats with Madison Oliver of GitHub Security Lab about how and why CVEs are assigned, the value of CVEs in vulnerability management, responsible coordination of vulnerability disclosures, the importance of comprehensiveness in security advisories, and why there is no stigma in a CVE. CVE Numbering Authority (CNA) scopes, disclosure policies, turnaround times, and more are discussed in general, as are GitHub’s specific CNA processes and how it helps open-source projects hosted on GitHub with their CVEs and advisories. Madison also writes about many of these topics in her blog article, Removing the Stigma of a CVE , on the GitHub Blog.

You can listen to The Value of Assigning CVEs online on Radio and Podcast. Open the player on this page to stream the available audio.

The Value of Assigning CVEs is an episode from We Speak CVE by CVE Program.

This episode is 19:11 long.

This episode was published on Jun 14, 2022.

Yes. Use the heart button on the episode page to add it to your favorite episodes list.

Yes. This page shows related episodes from We Speak CVE when more episodes are available from the podcast feed.