virus logo FortiClient Vulnerability

Mobatek MobaXterm CVE-2019-7690 Information Disclosure Vulnerability

description-logoDescription

In MobaTek MobaXterm Personal Edition v11.1 Build 3860, the SSH private key and its password can be retrieved from process memory for the lifetime of the process, even after the user disconnects from the remote SSH server. This affects Passwordless Authentication that has a Password Protected SSH Private Key.

affected-products-logoAffected Applications

MobaXterm

CVE References

CVE-2019-7690

Other References

https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-7690
ID 2504
Created May 12, 2021
Description
Updated		 Nov 07, 2023
Risk black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon
Coverage FortiClient
OS Windows
Vendor Mobatek
Patch manual
Application MobaXterm