CVE-2017-5242
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2017
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Rapid7 Nexpose Virtual Appliance Duplicate SSH Host Key
Nexpose and InsightVM virtual appliances downloaded between April 5th, 2017 and May 3rd, 2017 contain identical SSH host keys. Normally, a unique SSH host key should be generated the first time a virtual appliance boots.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Nexpose Virtual Appliance
- Vendor
- Rapid7
- Product
- Nexpose Virtual Appliance
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 2017.04.05 | affected | custom | 2017.04.05* | Unavailable | None listed |
| 2017.05.03 | affected | custom | Unavailable | 2017.05.03 | None listed |
InsightVM Virtual Appliance
- Vendor
- Rapid7
- Product
- InsightVM Virtual Appliance
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 2017.04.05 | affected | custom | 2017.04.05* | Unavailable | None listed |
| 2017.05.03 | affected | custom | Unavailable | 2017.05.03 | None listed |