Frank is working on a vulnerability assessment for a company on the West coast. The company hired Frank to assess its network security through scanning, pen tests, and vulnerability assessments. After discovering numerous known vulnerabilities detected by a temporary IDS he set up, he notices a number of items that show up as unknown but Questionable in the logs. He looks up the behavior on the Internet, but cannot find anything related. What organization should Frank submit the log to find out if it is a new vulnerability or not?

Question

Quizplus · Accepted Answer

CVE (Common Vulnerabilities and Exposures) is a database that catalogs known vulnerabilities. Frank should submit the log to CVE to determine if it is a new vulnerability.

Frank Is Working on a Vulnerability Assessment for a Company