Ugh. MITRE is now moving to a new CVE ID portal that requires you to have a Google account.
https://mitre.github.io/mitre-cve-roles/cve-id-request/#cvePortal
For the time being, the "legacy" portal is still functional:
https://cveform-legacy.mitre.org
But, seriously, WTF.
