mremoteng passing plain text credentials during iniating putty session

[Saumik-B]

Hello All,

The usage of saved passwords in the mRemoteNG application is causing credentials to be logged in Event ID 4688. Event logging is necessary for security purposes to track process executions. However, mRemoteNG is passing credentials in plaintext, which are then recorded in Event Viewer logs, leading to password exposure.
We attempted to mitigate this by enabling Tools → Options → Security → Completely Encrypt Connection File, but the credentials are still being transmitted in cleartext.

For example, the following command is logged:
C:\Program Files (x86)\mRemoteNG\PuTTYNG.exe" -load "Default Settings" -ssh -2 -l testuser -pw XXXXXXXXX -P 22 testmachine -hwndparent 590966

Please let us know if there is a way to encrypt the password or prevent it from being logged in Event ID 4688.

[tecxx]

i have fixed this in oct 2023
54544dd

[Kvarkas]

Hello,

Please let us know if there is a way to encrypt the password or prevent it from being logged in Event ID 4688.

What version you are reffering?

[Saumik-B]

MremoteNG Version 1.76.20.24615

[Saumik-B]

Also please note, we are able to reproduce the issue using ssh

For example, the following command is logged:
C:\Program Files (x86)\mRemoteNG\PuTTYNG.exe" -load "Default Settings" -ssh -2 -l testuser -pw XXXXXXXXX -P 22 testmachine -hwndparent 590966

[Kvarkas]

yes, that know issue but due refactoring how mR handling passwords will be fix in next relese for 1.78.* version

[ashishkumar0631]

Thanks @Kvarkas

Any Specific ETA when the new version 1.78* will be published.

[Saumik-B]

Please note that this is a critical issue preventing enterprises from using the application across all servers. Could you confirm the expected new version 1.78* release timeline/ETA?

Thank you for your efforts.

[Kvarkas]

working on it at the moment. Default branch has been switched to 1.78.2 (.Net 9) and 2 major things should be done before release - settings part completed, and how we store and use credentials expecting soon but cant promiss this month...