← CVE Intelligence

CVE-2017-5242

Rapid7 Nexpose Virtual Appliance Duplicate SSH Host Key PUBLISHED

Description (CNA)

Nexpose and InsightVM virtual appliances downloaded between April 5th, 2017 and May 3rd, 2017 contain identical SSH host keys. Normally, a unique SSH host key should be generated the first time a virtual appliance boots.

Affected (CNA)

Vendor / productVersions
Rapid7 / Nexpose Virtual Applianceaffected 2017.04.05 before 2017.04.05*; affected 2017.05.03 through 2017.05.03
Rapid7 / InsightVM Virtual Applianceaffected 2017.04.05 before 2017.04.05*; affected 2017.05.03 through 2017.05.03

CWE

CWE-321

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.