Skip to content
CVE PROGRAM SOURCE RECORD5.9 Medium

CVE-2024-6916

Zowe CLI --show-inputs-only displays securely stored properties

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Zowe

Description

A vulnerability in Zowe CLI allows local, privileged actors to display securely stored properties in cleartext within a terminal using the '--show-inputs-only' flag.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Open Mainframe Project Zowe CLI - Imperative

  • 5.1.0 to < 5.22.6affected

References