PT-2026-3035 · Mtputty · Mtputty

Sedat Ozdemir · Published 2026-01-15 · Updated 2026-01-15 · CVE-2021-47759

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions MTPutty version 1.0.1.21

Description A sensitive information disclosure issue exists in MTPutty that allows local attackers to view SSH connection passwords. This is possible through examining Windows PowerShell process listings. Attackers can execute a PowerShell command to obtain the complete command line of MTPutty processes, which may reveal plaintext SSH credentials. The vulnerable parameter is the command line arguments passed to MTPutty.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2021-47759

Affected Products

Mtputty

References · 4

• 🔥 https://exploit-db.com/exploits/50574 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-47759 · Security Note
• https://ttyplus.com/multi-tabbed-putty · Note
• https://twitter.com/CVEnew/status/2011926109085188143 · Twitter Post