Skip to content
CVE PROGRAM SOURCE RECORD5.9 Medium

CVE-2024-6833

Zowe CLI Auto-Init Leaks Credentials Locally

Description

A vulnerability in Zowe CLI allows local, privileged actors to store previously entered secure credentials in a plaintext file as part of an auto-init operation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Open Mainframe Project Zowe

  • 7.18.0 to < 7.23.5affected

References