Опубликовано: 17 июл. 2024
Источник: github
Github: Прошло ревью
CVSS4: 6.9
CVSS3: 5.9
Описание
Zowe CLI allows storage of previously entered secure credentials in a plaintext file
A vulnerability in Zowe CLI allows local, privileged actors to store previously entered secure credentials in a plaintext file as part of an auto-init operation.
Пакеты
Наименование
@zowe/cli
npm
Затронутые версииВерсия исправления
>= 7.18.0, < 7.23.5
7.23.5
Связанные уязвимости
CVSS3: 5.9
nvd
больше 1 года назад
A vulnerability in Zowe CLI allows local, privileged actors to store previously entered secure credentials in a plaintext file as part of an auto-init operation.