Skyline Critical Findings on an empty Org

[AmericaCube]

Hi! I've received this email today:

Dear Skyline Customer,

VMware Skyline has discovered 2 new Critical Findings within your environment. These new Findings may pose a risk to reliability and stability of your VMware products and solutions.

Some of the Findings are highlighted below. Log in to Skyline Advisor to review all the new Critical Findings discovered.

Organization ID - 6cdaf3cb-24df-417c-aedf-9bbaec60d6a2

Organization Name - Pirelli Sistemi Informativi

Finding Id - vSphere-CVE-2019-5532-VMSA#20190013

Description - VMware vCenter Server information disclosure vulnerability- CVE-2019-5532

Category - Security

Risk if no action taken - Security Risk

Number of objects impacted by the finding - 1

Recommendations - This issue is resolved in:;VMware vCenter 6.7 U3 (build number 14368073);VMware vCenter 6.5 U3 (build number 14020092);VMware vCenter 6.0 U3j (build number 14510547)

That Org is empty... No SDDC deployed...

[sri_vmware]

Hi AmericaCube,

Thank you for reaching out to Skyline Communities. I would request you to please share a few details with us on Smartsheet Forms so I can investigate the issue internally.

[evfernandez · Accepted solution]

Hi AmericaCube​,

There are two possibilities:

1. This was maybe reported in error. I just looked up the org ID and I see that Skyline is configured correctly and the collector has endpoints added. I couldn't find the 'Finding ID' you've mentioned.
2. We did several dogfooding for this feature and you must have been a part of it. (I see you're a VMware employee)

If you have any questions, please contact me on edwinf at vmware.