CVE-2017-5230

Name of the Vulnerable Software and Affected Versions Rapid7 Nexpose versions prior to 6.4.50

Description The Java keystore in Rapid7 Nexpose uses a static, unmodifiable password for encryption, which may compromise the security of saved scan credentials stored in the keystore.

Recommendations For versions prior to 6.4.50, update to version 6.4.50 or later to address the issue with the static password used for the Java keystore encryption.