high8.1

CVE-2022-38336

An access control issue in MobaXterm before v22.1 allows attackers to make connections to the server via the SSH or SFTP protocols without authentication.

Impact

An access control issue in MobaXterm before v22.1 allows attackers to make connections to the server via the SSH or SFTP protocols without authentication.

Affected products

Vendor	Product	Affected versions
Mobatek	Mobaxterm	before 22.2

Weakness classification

CWE-287

References

NVD record
CVE.org record
https://docs.ssh-mitm.at/vulnerabilities/CVE-2022-38336.html
https://docs.ssh-mitm.at/vulnerabilities/CVE-2022-38336.html