Virtual patching

Blocking the route to a flaw is not the same as removing the flaw.

A rule at the firewall or web application firewall can genuinely stop exploitation and buy time when patching has to wait. It is mitigation, and mitigation lasts exactly as long as the rule stays in place and the attacker does not find another route. Recording it as remediation is how flaws disappear from a report while remaining in the software.