Skip to content
OpenAdvisories
Medium · 5.9 CVE-2024-6916 EUVD-2024-47903GHSA-xxwq-5h7x-mm4x

Zowe CLI --show-inputs-only displays securely stored properties

Published Jul 19, 2024 · Updated Aug 1, 2024 · Assigned by Zowe

Description

A vulnerability in Zowe CLI allows local, privileged actors to display securely stored properties in cleartext within a terminal using the '--show-inputs-only' flag.

Affected products

VendorProductAffectedFixed
Open Mainframe Project Zowe CLI - Imperative 5.1.0 – < 5.22.6 5.22.6

References