Glossary: Vulnerability, Asset and Change Management
False positive
Also written: false positives
A reported problem that isn't really there, like the OpenSSH CVE-2024-6387 finding on the shop server, which Ubuntu had already fixed by backporting. Record the evidence and mark it so it isn't raised again.