Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2021-47759

MTPutty 1.0.1.21 - SSH Password Disclosure

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

MTPutty 1.0.1.21 contains a sensitive information disclosure vulnerability that allows local attackers to view SSH connection passwords through Windows PowerShell process listing. Attackers can run a PowerShell command to retrieve the full command line of MTPutty processes, exposing plaintext SSH credentials.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Ttyplus MTPutty

  • 1.0.1.21affected

References