False Positive Vulnerabilities Are Appearing

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

Vulnerabilities that have already been patched are showing in the console

Environment

• Carbon Black Cloud: All Supported Versions

Cause

False Vulnerabilities can have a variety of reasons

Resolution

If seeing a vulnerability which is a false positive please report this via a support case. Include the following information:

• Computer name / device id
• The vulnerability in question
• Version of the product that's been installed or Microsoft Patch (KB number)
• If a Microsoft patch, provide the output of the Powershell command:

  Get-Hotfix -id KB<EnterID>
  Ex:
  Get-Hotfix -id KB5002673

 

Additional Information

• If the resource RE: is blank please review this document
• If immediate dismissal for these vulnerabilities is needed please follow the steps here