PT-2019-18704 · Mobaxterm · Mobaxterm Personal Edition

Y0Gesh_She1Ke + 1 · Published 2019-05-13 · Updated 2019-05-15 · CVE-2019-7690

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions MobaXterm Personal Edition version 11.1 Build 3860

Description The issue allows retrieval of the SSH private key and its password from process memory for the lifetime of the process, even after disconnection from the remote SSH server. This affects passwordless authentication with a password-protected SSH private key.

Recommendations For MobaXterm Personal Edition version 11.1 Build 3860, consider disabling passwordless authentication that uses a password-protected SSH private key until a fix is available. Restrict access to sensitive information and limit the use of SSH private keys to minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2019-7690

Affected Products

Mobaxterm Personal Edition

References · 3

• 🔥 https://github.com/yogeshshe1ke/CVE/blob/master/2019-7690/mobaxterm_exploit.py · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-7690 · Security Note
• https://osv.dev/vulnerability/CVE-2019-7690 · Vendor Advisory