CVE-2019-7690: Critical severity mobaxterm vulnerability

Published May 13, 2019

Updated

In MobaTek MobaXterm Personal Edition v11.1 Build 3860, the SSH private key and its password can be retrieved from process memory for the lifetime of the process, even after the user disconnects from the remote SSH server. This affects Passwordless Authentication that has a Password Protected SSH Private Key.

Affected Software

1 affected component

Mobatek MobaXterm=11.1-3860

Event History

May 13, 2019

CVE Published

via MITRE·03:58 PM

Data Sourced

via MITRE·03:58 PM

Description

Frequently Asked Questions

What is the severity of CVE-2019-7690?

The severity of CVE-2019-7690 is critical with a score of 9.8.

How can an attacker retrieve the SSH private key and its password in MobaTek MobaXterm Personal Edition v11.1 build 3860?

An attacker can retrieve the SSH private key and its password from the process memory of MobaTek MobaXterm Personal Edition v11.1 build 3860.

Is the vulnerability limited to Passwordless Authentication in MobaTek MobaXterm Personal Edition v11.1 build 3860?

Yes, the vulnerability affects Passwordless Authentication in MobaTek MobaXterm Personal Edition v11.1 build 3860.

How long can an attacker retrieve the SSH private key and its password from process memory?

An attacker can retrieve the SSH private key and its password from process memory for the lifetime of the process, even after the user disconnects from the remote SSH server.

How can I fix CVE-2019-7690 in MobaTek MobaXterm Personal Edition v11.1 build 3860?

To fix CVE-2019-7690, users should update to a version of MobaTek MobaXterm Personal Edition that contains a patch for the vulnerability.