Before disseminating information on the vulnerability to its constituent members, the information-sharing organization worked with the company to develop a message that would provide the needed vulnerability information but not disclose sensitive details.
Constituent members do not have any vulnerability at all.