Glossary: Threats, Threat Actors and Motivations

CNA

Also written: CVE Numbering Authority

A CVE Numbering Authority: an organization allowed to assign CVE IDs. Apache was the CNA for the Log4j flaw.