Vulnerability detector - false positive - Energy Logserver Community

Vulnerability detector - false positive

Hi,

vulnerability scanner returns information about the critical vulnerability even though the system is up to date.

Most likely, this is because Windows has been updated as part of a cumulative update and does not detect the above update.

How can we protect ourselves from false positive?

If the wazuh version is lower than 4, the problem is probably caused by an outdated MSU file.

The latest dependency file can be downloaded from the link below:

Note that the name has to be exactly msu.json.gz