CVE-2022-38336: High severity mobaxterm vulnerability
Published Dec 5, 2022
·Updated
An access control issue in MobaXterm before v22.1 allows attackers to make connections to the server via the SSH or SFTP protocols without authentication.
Affected Software
1 affected component
Mobatek MobaXterm<22.2
Event History
Dec 5, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is CVE-2022-38336?
CVE-2022-38336 is an access control issue in MobaXterm before v22.1 that allows attackers to make connections to the server via SSH or SFTP protocols without authentication.
2
How severe is CVE-2022-38336?
CVE-2022-38336 has a severity value of 8.1, which is considered high.
3
Which version of MobaXterm is affected by CVE-2022-38336?
MobaXterm versions up to and excluding v22.2 are affected by CVE-2022-38336.
4
How can I fix the access control issue in MobaXterm?
To fix the access control issue in MobaXterm, update to version 22.2 or later.
5
Where can I find more information about CVE-2022-38336?
You can find more information about CVE-2022-38336 at the following reference: https://docs.ssh-mitm.at/vulnerabilities/CVE-2022-38336.html