CVE-2017-5230 Hardcoded credentials in Nexpose

What is CVE-2017-5230?

CVE-2017-5230 is a high-severity vulnerability in Rapid7 Nexpose, published on 2 Mar 2017. An attacker needs administrator access to exploit it, with no action from the victim.

Official description

The Java keystore in all versions and editions of Rapid7 Nexpose prior to 6.4.50 is encrypted with a static password of 'r@p1d7k3y5t0r3' which is not modifiable by the user. The keystore provides storage for saved scan credentials in an otherwise secure location on disk.

Weakness: CWE-798

Which versions are affected by CVE-2017-5230?

It affects 1 product.

Products include Rapid7 Nexpose.

How do I fix CVE-2017-5230?

No fix has been published for CVE-2017-5230 yet. Limit exposure of the affected software until one is available.

Is CVE-2017-5230 being exploited?

There is no known exploitation of CVE-2017-5230 in the wild and no public exploit code.

Other vulnerabilities in Rapid7 Nexpose

• CVE-2017-5264 Cross-site request forgery in Nexpose High 8.8
• CVE-2019-5638 Rapid7 Nexpose Insufficient Session Management High 8.7
• CVE-2017-5243 Weak cryptography in Nexpose hardware appliance High 8.5
• CVE-2017-5232 Other in Nexpose High 7.8
• CVE-2020-7382 Unquoted Path in Rapid7 Nexpose Installer Medium 6.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-6pf3-gf23-w78h.