CVE-2017-5230

State: Published
Severity: Not scored
Published: Mar 2, 2017
Updated: Aug 5, 2024
Reserved: Jan 9, 2017

Description

The Java keystore in all versions and editions of Rapid7 Nexpose prior to 6.4.50 is encrypted with a static password of 'r@p1d7k3y5t0r3' which is not modifiable by the user. The keystore provides storage for saved scan credentials in an otherwise secure location on disk.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
NexposeRapid7	6.4.49 and priorAffected

References

https://help.rapid7.com/nexpose/en-us/release-notes/#6.4.50
96956vdb-entry
https://community.rapid7.com/community/infosec/blog/2017/03/01/multiple-vulnerabilities-affecting-four-rapid7-products

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.