https://jericho.blog/2016/03/17/mitre-horrible-new-cve-id-scheme-and-spindoctoring/