Description
Nexpose and InsightVM virtual appliances downloaded between April 5th, 2017 and May 3rd, 2017 contain identical SSH host keys. Normally, a unique SSH host key should be generated the first time a virtual appliance boots.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Rapid7 | Nexpose Virtual Appliance | 2017.04.05 – < 2017.04.05*, 2017.05.03 – ≤ 2017.05.03 | 2017.04.05* |
| Rapid7 | InsightVM Virtual Appliance | 2017.04.05 – < 2017.04.05*, 2017.05.03 – ≤ 2017.05.03 | 2017.04.05* |