The vulnerabilities were not to be disclosed to anyone outside the White House, CISA was told.