Description
MTPutty 1.0.1.21 contains a sensitive information disclosure vulnerability that allows local attackers to view SSH connection passwords through Windows PowerShell process listing. Attackers can run a PowerShell command to retrieve the full command line of MTPutty processes, exposing plaintext SSH credentials.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ttyplus | MTPutty | 1.0.1.21 | — |
References
- ExploitDB-50574 exploit
- Official MTPutty Product Homepage product