CVE-2003-0046: AbsoluteTelnet SSH2 client does not clear logon credentials from memory, including plaintext passwords, whi...

Security readout for executives and security teams

AbsoluteTelnet’s SSH2 client could leave login credentials, including plaintext passwords, in memory after authentication. If an attacker can read memory on that workstation, they may recover SSH credentials and reuse them against other systems. Exposure is most likely on legacy workstations where AbsoluteTelnet SSH2 client is still used for administrative SSH access. Risk rises when the host is shared, malware-infected, or otherwise accessible to someone who can inspect process or system memory. Treat this as a legacy credential-exposure risk, not a broad remote emergency. Prioritize if AbsoluteTelnet was used by administrators or on systems with access to production, network, or customer environments. Mitigation focus: Inventory endpoints for AbsoluteTelnet SSH2 client installations and usage.; Check Celestial Software or vendor guidance for fixed or replacement versions.; Remove the client where it is no longer business-required..

Prepared

Jul 1, 2026, 06:00 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.