Page 48 - Cyber Defense eMagazine July 2024

Transparency in Cybersecurity: The Importance of Accurate

Vulnerability Disclosures

By Mike Walters, President and Co-Founder of Action1 Corporation

Recently, the cybersecurity world has been rattled by a series of critical vulnerabilities discovered in Ivanti
Connect Secure VPN software. In the wake of these ongoing vulnerability issues, Ivanti has also faced
criticism from members of the infosec community for its handling of vulnerability disclosures. Ivanti
grouped multiple vulnerabilities under a single registered Common Vulnerabilities and Exposures (CVE)
ID, rather than disclosing them as individual vulnerabilities. Juniper faced similar criticism for disclosing
only two vulnerabilities instead of four.

These scenarios highlight the importance of accurate vulnerability disclosure. This article will examine
how inconsistencies impact vulnerability remediation effectiveness and offer improvement suggestions.

Inaccuracies in Vulnerability Disclosures and Subsequent Risks

Cyber Defense eMagazine – July 2024 Edition 48
Copyright © 2024, Cyber Defense Magazine. All rights reserved worldwide.