CISA removes 'PetitPotam' bug from catalog after Microsoft warns of risk to domain controllers
This January 2023 story from The Record reports that CISA removed a PetitPotam-related flaw from its exploited-bugs catalog after Microsoft flagged update problems on domain controllers. Bugcrowd CTO Casey Ellis says CISA made the right call, since patches released under attack can carry unexpected risks, and calls it a shift from vulnerability to risk.
Source description, as published
CISA removed a PetitPotam-related vulnerability from its catalog of known exploited bugs after Microsoft reported issues with how an update addressing the issue affected domain controllers.