CVE-2017-5242 — Rapid7 Nexpose Virtual Appliance Duplicate SSH Host Key
Nexpose and InsightVM virtual appliances downloaded between April 5th, 2017 and May 3rd, 2017 contain identical SSH host keys. Normally, a unique SSH host key should be generate…
Published: 2023-01-12 · CVSS: 7.7 · CVSS 3.1
Nexpose and InsightVM virtual appliances downloaded between April 5th, 2017 and May 3rd, 2017 contain identical SSH host keys. Normally, a unique SSH host key should be generated the first time a virtual appliance boots.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7