Vendor
Open Mainframe Project
7 known vulnerabilities.
Products
5 results · Clear filters · Feed
-
Medium 5.3
Conformance validation endpoint discloses detail about service to unauthenticated users
The conformance validation endpoint is public so everybody can verify the conformance of onboarded services. The response could contain specific information about the service, including available endpoints, and swagger. It could advise about the running versi…
-
Medium 5.3
Health endpoint offers list of onboarded services to unauthenticated users
The health endpoint is public so everybody can see a list of all services. It is potentially valuable information for attackers.
-
Medium 5.9
Zowe CLI --show-inputs-only displays securely stored properties
A vulnerability in Zowe CLI allows local, privileged actors to display securely stored properties in cleartext within a terminal using the '--show-inputs-only' flag.
-
Medium 5.9
Zowe CLI Auto-Init Leaks Credentials Locally
A vulnerability in Zowe CLI allows local, privileged actors to store previously entered secure credentials in a plaintext file as part of an auto-init operation.
-
Medium 5.3
It is possible to manipulate the JWT token without the knowledge of the JWT secret and authenticate without valid JWT t…