PT-2026-3035 · Mtputty · Mtputty

Sedat Ozdemir · Publicado 2026-01-15 · Atualizado 2026-01-15 · CVE-2021-47759

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Média

Vetor base

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions MTPutty version 1.0.1.21

Description A sensitive information disclosure issue exists in MTPutty that allows local attackers to view SSH connection passwords. This is possible through examining Windows PowerShell process listings. Attackers can execute a PowerShell command to obtain the complete command line of MTPutty processes, which may reveal plaintext SSH credentials. The vulnerable parameter is the command line arguments passed to MTPutty.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Insufficiently Protected Credentials

Enumeração de Fraquezas

CWE-522

Identificadores relacionados

CVE-2021-47759

Produtos afetados

Mtputty

Referências · 4

• 🔥 https://exploit-db.com/exploits/50574 · Exploit
• https://ttyplus.com/multi-tabbed-putty · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2021-47759 · Nota de Segurança
• https://twitter.com/CVEnew/status/2011926109085188143 · Publicação no Twitter