Oracle chief security officer Mary Ann Davidson has called on vendors of payment application software to join her company in opposing specific security vulnerability reporting requirements of Payment Card Industry Security Standards Council. In a lengthy, sharply-worded blog post late last month, Davidson lashed out at the PCI Council for allegedly not responding to Oracle’s repeated requests that it reconsider its policy of requiring software vendors to share detailed vulnerability data even in circumstances where patches haven’t been released. Gartner analyst: “A lot of companies are getting annoyed at the whole process””]
Source: https://www.csoonline.com/article/2131409/oracle-cso-trashes-pci-rules.html