Internal server error for Tenable.io in when importing vulnerability report into Vulnerability tool

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

When attempting to import vulnerability data from Tenable.io into VMware Aria Automation Config (formerly SaltStack Config) via the Tenable API, the process fails with an Internal server error.

The following error is observed in the RaaS (Remote Access and Control Service) logs:

Error in importing tenable scan: filter_value is not a valid type.
Traceback (most recent call last):
  File "/var/lib/raas/unpack/_MEIr55Xvn/raas/mods/vman/tenable.py", line 322, in convert_third_party_assessment_via_api
    tag_uuid = _save_tag(tio, tgt_uuid)
  File "/var/lib/raas/unpack/_MEIr55Xvn/raas/mods/vman/tenable.py", line 128, in _save_tag
    for tag in tio.tags.list(
  File "tenable/io/tags.py", line 345, in list
    query = self._tag_list_constructor(filters, self._filterset_tags,
  File "tenable/io/tags.py", line 293, in _tag_list_constructor
    query = self._parse_filters(filters, filterdefs, rtype='colon')
  File "tenable/io/base.py", line 47, in _parse_filters
    raise TypeError('filter_value is not a valid type.')
TypeError: filter_value is not a valid type. 

Additionally, while manual imports may succeed, supported CVEs may not appear as expected 

Environment

Aria Config 8.16.0.4+

Cause

The format of the Tenable.io data being imported is unrecognized.

Resolution

This issue is resolved in the 8.18.4 release of VMware Aria Automation Config. To resolve this issue, upgrade to version 8.18.4 or later. Contact support for more information.