VMWARE Tanzu

[riazahamed]

These 2 products Flexera is not pulling the data from vendor advisory page. On 14 sep, it took only 2 bulletins and left out remaining advisories?

VMware Tanzu Application Service for VMs 2.x

VMware Tanzu Ops Manager 2.x

[raslam]

Riaz, 

We had issued a rejected advisory SA104049 covering both products on 13 September. Please find the details below. 

Advisory Details:

Description:

A security notice has been issued for VMware Tanzu Ops Manager and VMware Tanzu Application Service for VMs, where an issue is rejected due to having no valid exploitation scenario.

Reason for rating:

1) While the issue is present in the respective product, the vendor does not present any valid exploitation scenario.

Original advisory:

https://tanzu.vmware.com/security/usn-4719-1

Please look at the below link to learn why and how Secunia research rejects an advisory for specific products. 

https://docs.flexera.com/svr/ug/Content/helplibrary/Rejected_Advisories.htm?Highlight=rejected

-Raheel