missing cve issue

[adird3]

Hey,
there is a CVE (CVE-2024-42448) that released two days ago with score of 9.9 - https://www.veeam.com/kb4679
but i cant see it on any official CVE database.
there is something i miss about this situation?

[emergar07]

Remove maybe for a conflicting with a duplicated, I see it was related to CVE-2024-42449 Maybe you can reach out to the reporter and clarify EM

…

________________________________ From: adird3 ***@***.***> Sent: Thursday, December 5, 2024 10:30 AM To: CVEProject/cvelistV5 ***@***.***> Cc: Subscribed ***@***.***> Subject: [CVEProject/cvelistV5] missing cve issue (Issue #76) Hey, there is a CVE (CVE-2024-42448) that released two days ago with score of 9.9 - https://www.veeam.com/kb4679 but i cant see it on any official CVE database. there is something i miss about this situation? — Reply to this email directly, view it on GitHub<#76>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/AEFORSCS7O6RGLE4DPFAQNL2EATLHAVCNFSM6AAAAABTCEGIKCVHI2DSMVQWIX3LMV43ASLTON2WKOZSG4ZDAMBRGU4TGMI>. You are receiving this because you are subscribed to this thread.

[adird3]

Remove maybe for a conflicting with a duplicated, I see it was related to CVE-2024-42449 Maybe you can reach out to the reporter and clarify EM

the CVE-2024-42449 is a different cve from the same vendor, it has different description and different score

[emergar07]

No buddy if you go to the advisory you will see both shown CVE-2024-42448/CVE-2024-42449 <https://github.com/advisories/GHSA-6mqv-9qvr-xhfq> Means they removed the CVE for embargo or duplication As I said contact the reporter they may answer your question or ask on the reporters blog EM { "cve_id": "CVE-2024-42448", "cve_year": "2024", "state": "RESERVED", "owning_cna": "[REDACTED]" } CVE-2024-42448 RESERVED [View JSON](https://cveawg.mitre.org/api/cve-id/CVE-2024-42448) Important CVE Record Format Information [CVE Records](https://www.cve.org/ResourcesSupport/Glossary?activeTerm=glossaryRecord) on this CVE.ORG website are displayed in the official [CVE Record Format](https://www.cve.org/AllResources/CveServices#CveRecordFormat). Downloads in this format are available on the [Downloads](https://www.cve.org/Downloads) page. Learn more about the CVE Record Format [here](https://www.cve.org/AllResources/CveServices#CveRecordFormat). This ID has been reserved by a [CNA](https://www.cve.org/ProgramOrganization/CNAs). This candidate has been reserved by a CVE Numbering Authority (CNA). This record will be updated by the assigning CNA once details are available. Learn more about the Reserved state [here](https://www.cve.org/ResourcesSupport/FAQs#pc_cve_recordsreserved_signify_in_cve_record).

…

On Thu, 5 Dec 2024 at 11:02, adird3 ***@***.***> wrote: Remove maybe for a conflicting with a duplicated, I see it was related to CVE-2024-42449 Maybe you can reach out to the reporter and clarify EM the CVE-2024-42449 <https://github.com/advisories/GHSA-6mqv-9qvr-xhfq> is a different cve from the same vendor, it has different description and different score — Reply to this email directly, view it on GitHub <#76 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AEFORSHWOOTVIXQYP6BA33T2EAXD5AVCNFSM6AAAAABTCEGIKCVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDKMJZHE4DKMZYHA> . You are receiving this because you commented.Message ID: ***@***.***>

[M-nj]

CVE-2024-42448 is marked as reserved in CVE Services. This repo is just a mirror of CVE Services. If it has been made public already, please notify the appropriate CNA so that they can update CVE Services with the information.

• It looks like HackerOne might be the CNA to notify for this one as they have previously, and recently, assigned for this product. See CVE-2024-45206 and CVE-2024-45207.