Security vendors are accused of bending CVE assignment rules
Briefly

Both Juniper Networks and Ivanti have attracted criticism from members of the infosec industry for the way they've handled the disclosure of vulnerabilities over the past week.
Security vulnerabilities that are serious enough to require patching to avoid problems for organizations generally need to be registered with a CVE Numbering Authority (CNA) and added to the CVE program.
Read at Theregister
[
add
]
[
|
|
]