NEW! Mirantis Academy -   Learn confidently with expert guidance and On-demand content.   Learn More

Mirantis Joins Mission of the Common Vulnerabilities and Exposures (CVE) Program

January 18, 2022

By Henson Gawliu

Initiative to identify, define and catalog publicly-disclosed cybersecurity vulnerabilities

CAMPBELL, Calif., January 18, 2022 —Mirantis, the open cloud company, today announced the company’s designation as a CVE Numbering Authority (CNA) by the CVE Program, which is sponsored by the U.S. Department of Homeland Security. As a CNA, the Mirantis Product Security Incident Response Team (PSIRT) is authorized to assign CVE identification numbers to security vulnerabilities in Mirantis products.

As a newly designated CNA, Mirantis now can streamline the process of publishing accurate and timely vulnerability information so its users are well informed and able to quickly resolve security vulnerabilities.

“Security has always been a priority and now as a CNA, we’ll join the industry initiative to have a consistent, standardized way of disclosing known vulnerabilities, so there can be a structured, coordinated approach to resolution for our users,” said Adam Parco, CTO, Mirantis.

The CVE Program is an international, community-based effort that relies on the community to discover vulnerabilities. The vulnerabilities are discovered then assigned and published to the CVE List. Partners, like Mirantis, publish CVE Records to communicate consistent descriptions of vulnerabilities. Information technology and cybersecurity professionals use CVE Records to ensure they are discussing the same issue, and to coordinate their efforts to prioritize and address the vulnerabilities.

The CVE Program is sponsored by the Cybersecurity and Infrastructure Security Agency (CISA) of the U.S. Department of Homeland Security (DHS) and is operated by the MITRE Corporation in close collaboration with international industry, academic, and government stakeholders.

About the CVE Program  

The mission of the Common Vulnerabilities and Exposures (CVE) Program is to identify, define, and catalog publicly-disclosed cybersecurity vulnerabilities. There is one CVE Record for each vulnerability in the catalog. The vulnerabilities are discovered then assigned and published by organizations from around the world that have partnered with the CVE Program. Partners publish CVE Records to communicate consistent descriptions of vulnerabilities. Information technology and cybersecurity professionals use CVE Records to ensure they are discussing the same issue, and to coordinate their efforts to prioritize and address the vulnerabilities.  

Or share via:

PR Contact

Joseph Eckert for Mirantis

jeckert@eckertcomms.com

About Mirantis

Mirantis helps organizations ship code faster on public and private clouds, increasing developer productivity by removing the stress of managing infrastructure. The company combines automation and cloud native expertise to provide a ZeroOps approach to managing and operating Kubernetes and cloud environments. Mirantis delivers a public cloud experience on any infrastructure, from the data center to the edge, with one cohesive cloud experience for complete app and DevOps portability, a single pane of glass, and automated full-stack lifecycle management, all based on open source.

Mirantis serves many of the world’s leading enterprises, including Adobe, DocuSign, Inmarsat, PayPal, Reliance Jio, Societe Generale, Splunk, and S&P Global.