medium5.9
CVE-2024-6833
Zowe CLI allows storage of previously entered secure credentials in a plaintext file
Impact
A vulnerability in Zowe CLI allows local, privileged actors to store previously entered secure credentials in a plaintext file as part of an auto-init operation.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | @zowe/cli | >= 7.18.0, < 7.23.5 | 7.23.5 |