3 ms·
You are probably misremembering the story. If the module was really not enabled it wouldn't come up in a security scan or be present in the banner.
by dizhn 4y ago
You are probably misremembering the story. If the module was really not enabled it wouldn't come up in a security scan or be present in the banner.
- vladvasiliu 4y agoIf it's the kind of report I've seen, it could've been along the lines of Package version X.Y.Z comes with M module which has V vulnerability. Upgrade to X.Y.Z+1, which patched it. They don't actually look at the enabled modules.