Whitelisted CVEs still showing in online report? about meta-timesys

[iancampbell]

Hello,

You are correct about meta-timesys whitelisting CVEs from the CVE_CHECK_WHITELIST. We will update our documentation to reflect that.

When a package or CVE ID is added to VIGILES_WHITELIST that package or CVE should show up as Whitelisted in the online report.
I confirmed that this is working correctly for me. If you create a Support Ticket and provide a link to the report in question as well as your local.conf VIGILES_WHITELIST entry we can dig into this further.

Whitelists are stored at a product level. Whitelisting either through the web or via the VIGILES_WHITELIST variable should result in the same behavior.

For more information about whitelisting please also see our document on linuxlink

[taylor-winning]

Thanks for your reply.

I have manually whitelisted the CVEs via the online GUI for now, there wasn't many to do. I am going to guess this issue was down to user error, as I'm new to the product.

Thanks again