NVD

Id
83192  
Name
CVE-2017-5230  
Description
The Java keystore in all versions and editions of Rapid7 Nexpose is encrypted with a static password of 'r@p1d7k3y5t0r3' which is not modifiable by the user. The keystore provides storage for saved scan credentials in an otherwise secure location on disk.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-03-29  
Published
2017-03-02  
Modified Date
2017-03-20  
Seq
2017-5230  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
408767 83192 CVE-2017-6214 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ccf7abb93af09ad0868ae9033d1ca8108bdaec82  View
408768 83192 CVE-2017-6214 http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.11  View
408769 83192 CVE-2017-6214 https://github.com/torvalds/linux/commit/ccf7abb93af09ad0868ae9033d1ca8108bdaec82  View
408770 83192 CVE-2017-6214 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ccf7abb93af09ad0868ae9033d1ca8108bdaec82  View
408771 83192 CVE-2017-6214 http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.11  View
408772 83192 CVE-2017-6214 https://github.com/torvalds/linux/commit/ccf7abb93af09ad0868ae9033d1ca8108bdaec82  View
408773 83192 CVE-2017-6214 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ccf7abb93af09ad0868ae9033d1ca8108bdaec82  View
408774 83192 CVE-2017-6214 http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.11  View
408775 83192 CVE-2017-6214 https://github.com/torvalds/linux/commit/ccf7abb93af09ad0868ae9033d1ca8108bdaec82  View
411157 83192 CVE-2017-0491 96791  View
411158 83192 CVE-2017-0491 https://source.android.com/security/bulletin/2017-01-01.html  View
411159 83192 CVE-2017-0491 https://source.android.com/security/bulletin/2017-03-01.html  View
411160 83192 CVE-2017-0491 96791  View
411161 83192 CVE-2017-0491 https://source.android.com/security/bulletin/2017-01-01.html  View
411162 83192 CVE-2017-0491 https://source.android.com/security/bulletin/2017-03-01.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
65771 JVNDB-2017-002110 Rapid7 Nexpose の全てのバージョンおよびエディションの Java キーストアにおける静的パスワードで暗号化される脆弱性 Rapid7 Nexpose の全てのバージョンおよびエディションの Java キーストアには、静的パスワード "r@p1d7k3y5t0r3" で暗号化される脆弱性が存在します。 CVE-2017-5230 CVE-2017-5230 83192 6.5 7.2 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-002110.html 2017-03-01 2017-03-28 View