Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use Owner CNA Short Name for CVE Record When Different from Assigner Name #3471

Open
wants to merge 5 commits into
base: int
Choose a base branch
from

Conversation

rlxdev
Copy link
Collaborator

@rlxdev rlxdev commented Feb 24, 2025

For a published CNA record, this change will display the owner CNA short name in the "CNA heading" of the displayed record if the owner is not the same as the "assigner" CNA. Previously, the assigner CNA was displayed, even if the ownership of the CVE record changed.

The CNA Name for display is chosen as follows:

  • If the owner (short) name differs from the assigner (short) name, use the owner short name as the CNA name.
  • Owner name is the same as the assigner name:
    • If the assigner UUID is available, use it to look up the CNA full name and use this as the CNA name.
    • No UUID available: use assigner short name as the CNA name.

The owner UUID isn't available at the point where we need to determine the CNA name, so we can't look up the full name.
Our only choice is to use the short name for the CVE record heading.

With this change, the CNA name will only be different if the owner changes.

@rlxdev rlxdev self-assigned this Feb 24, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants