Skip to content
OpenAdvisories

Vendor

zhmcclient

2 known vulnerabilities.

2 results · Clear filters · Feed

  • High 8.3

    Ansible collection "ibm.ibm_zhmc" has passwords in clear text in log file and in output of some modules when specified as input

    ibm.ibm_zhmc is an Ansible collection for the IBM Z HMC. The Ansible collection "ibm.ibm_zhmc" writes password-like properties in clear text into its log file and into the output returned by some of its Ansible module in the following cases: 1. The 'boot_ftp_…

  • High 8.3

    Python package "zhmcclient" has passwords in clear text in its HMC and API logs

    zhmcclient is a pure Python client library for the IBM Z HMC Web Services API. In affected versions the Python package "zhmcclient" writes password-like properties in clear text into its HMC and API logs in the following cases: 1. The 'boot-ftp-password' and …