Consider making title/description optional on vulnerability, weakness, and configuration

johnwunder / twigs

STIX 2.0 Strawman

http://twigs-cti.herokuapp.com/

MIT License

7 stars 3 forks source link

Open johnwunder opened 8 years ago

johnwunder commented 8 years ago

For things that have CVE, CWE, CCE, the title is redundant with what you can get from the repos.

OTOH, have to balance that with:

vulnerabilities (etc.) that don't have CVEs
cases where a vendor wants to provide title/description on top of that provided by CVE
tools that may want to be lazy and not look it up