high7.7
CVE-2017-5242
Nexpose and InsightVM virtual appliances downloaded between April 5th, 2017 and May 3rd, 2017 contain identical SSH host keys.
Impact
Nexpose and InsightVM virtual appliances downloaded between April 5th, 2017 and May 3rd, 2017 contain identical SSH host keys. Normally, a unique SSH host key should be generated the first time a virtual appliance boots.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rapid7 | Insightvm | from 2017-04-05 through 2017-05-03 |