Joe, the security administrator, sees this in a vulnerability scan report: "The server 10.1.2.232 is running Apache 2.2.20 which may be vulnerable to a mod_cgi exploit." Joe verifies that the mod_cgi module is not enabled on 10.1.2.232. This message is an example of:

Question

Quizplus · Accepted Answer

The message is a false positive because the vulnerability scan reports a potential issue that does not actually exist, as the mod_cgi module is not enabled on the server.

Joe, the Security Administrator, Sees This in a Vulnerability Scan