Sedat Ozdemir

**Name of the Vulnerable Software and Affected Versions** MTPutty version 1.0.1.21 **Description** A sensitive information disclosure issue exists in MTPutty that allows local attackers to view SSH connection passwords. This is possible through examining Windows PowerShell process listings. Attackers can execute a PowerShell command to obtain the complete command line of MTPutty processes, which may reveal plaintext SSH credentials. The vulnerable parameter is the command line arguments passed to MTPutty. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.