Skip to content

Use Owner CNA Short Name for CVE Record When Different from Assigner Name#3471

Closed
rlxdev wants to merge 5 commits intointfrom
rl-1224-owning-cna
Closed

Use Owner CNA Short Name for CVE Record When Different from Assigner Name#3471
rlxdev wants to merge 5 commits intointfrom
rl-1224-owning-cna

Conversation

@rlxdev
Copy link
Copy Markdown
Collaborator

@rlxdev rlxdev commented Feb 24, 2025

For a published CNA record, this change will display the owner CNA short name in the "CNA heading" of the displayed record if the owner is not the same as the "assigner" CNA. Previously, the assigner CNA was displayed, even if the ownership of the CVE record changed.

The CNA Name for display is chosen as follows:

  • If the owner (short) name differs from the assigner (short) name, use the owner short name as the CNA name.
  • Owner name is the same as the assigner name:
    • If the assigner UUID is available, use it to look up the CNA full name and use this as the CNA name.
    • No UUID available: use assigner short name as the CNA name.

The owner UUID isn't available at the point where we need to determine the CNA name, so we can't look up the full name.
Our only choice is to use the short name for the CVE record heading.

With this change, the CNA name will only be different if the owner changes.

@rlxdev rlxdev self-assigned this Feb 24, 2025
@rlxdev rlxdev closed this Apr 16, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants