Lucene search
HistoryJul 19, 2024 - 11:15 a.m.
CVE-2024-6916
zowe cli
vulnerability
cleartext
terminal
securely stored properties
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0
Percentile
9.3%
A vulnerability in Zowe CLI allows local, privileged actors to display securely stored properties in cleartext within a terminal using the ‘–show-inputs-only’ flag.
Affected configurations
Node
zowezowe_cli
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0
Percentile
9.3%
Related for NVD:CVE-2024-6916