Description
A vulnerability in Zowe CLI allows local, privileged actors to store previously entered secure credentials in a plaintext file as part of an auto-init operation.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Open Mainframe Project | Zowe | 7.18.0 – < 7.23.5 | 7.23.5 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | @zowe/cli | >= 7.18.0, < 7.23.5 | 7.23.5 | GHSA-ghgq-x6wc-6jr5 |