Skip to content
CVE PROGRAM SOURCE RECORD7.7 High

CVE-2017-5242

Rapid7 Nexpose Virtual Appliance Duplicate SSH Host Key

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
rapid7

Description

Nexpose and InsightVM virtual appliances downloaded between April 5th, 2017 and May 3rd, 2017 contain identical SSH host keys. Normally, a unique SSH host key should be generated the first time a virtual appliance boots.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Rapid7 Nexpose Virtual Appliance

  • 2017.04.05 to < 2017.04.05*affected
  • 2017.05.03 to ≤ 2017.05.03affected

Rapid7 InsightVM Virtual Appliance

  • 2017.04.05 to < 2017.04.05*affected
  • 2017.05.03 to ≤ 2017.05.03affected

References