Skip to content

Glossary: Vulnerability, Asset and Change Management

False positive

Also written: false positives

A reported problem that isn't really there, like the OpenSSH CVE-2024-6387 finding on the shop server, which Ubuntu had already fixed by backporting. Record the evidence and mark it so it isn't raised again.

Where the book teaches it

Related terms

False negativeTrue positiveBackportCredentialed scan