GHSA-ghgq-x6wc-6jr5
GitHub Security Advisory
Zowe CLI allows storage of previously entered secure credentials in a plaintext file
✓ GitHub Reviewed
MODERATE
Has CVE
Advisory Details
A vulnerability in Zowe CLI allows local, privileged actors to store previously entered secure credentials in a plaintext file as part of an auto-init operation.
Affected Packages
npm
@zowe/cli
Affected versions:
7.18.0
(fixed in 7.23.5)
Related CVEs
Key Information
5.0
/10
Dataset
Last updated: November 25, 2025 6:29 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.