CVE-2021-36367

CVE-2021-36367 describes a high-severity vulnerability in PuTTY versions through 0.75, where the client proceeds with an SSH session even without a substantive authentication response, making it susceptible to spoofed authentication prompts. This allows an attacker-controlled SSH server to capture user credentials. The vulnerability has a CVSS score of 8.1 (High) due to its network attack vector, low attack complexity, and high impact on confidentiality and integrity, requiring user interaction. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion or media coverage for this vulnerability.