Security News > 2024 > May > Why cloud vulnerabilities need CVEs

Patch network security isn't applicable in the same way for cloud environments, and few cloud providers assign Common Vulnerabilities and Exposures identifiers to vulnerabilities.

For vulnerability management teams who talk exclusively in this CVE-based construct, the lack of CVEs in cloud services is a significant challenge.

With cloud-specific vulnerabilities littering the news every week, the question of whether cloud service providers should use CVE identifiers is more relevant than ever.

The benefit is the cloud provider takes on the bulk of the security risk as well as the work to patch vulnerabilities.

The implication is clear - cloud vulnerabilities can lead to security issues on a massive scale.

CVEs are a huge benefit for identifying potential risks and for being able to track and analyze specific vulnerabilities to ensure they are remediated.

News URL

https://www.helpnetsecurity.com/2024/05/01/cve-vulnerability-management/