CVE-2024-6833

5.9 mediumEPSS 0.1%

A vulnerability in Zowe CLI allows local, privileged actors to store previously entered secure credentials in a plaintext file as part of an auto-init operation.

Severity

CVSS 3.1

5.9 medium

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 3% of CVEs (scores of 2026-10-31)
Published: 2024-07-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Packages (OSV)

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-ghgq-x6wc-6jr5	npm	@zowe/cli	>=7.18.0 <7.23.5	7.23.5

References

https://github.com/zowe/zowe-cli/
https://github.com/zowe/zowe-cli/

Check your stack JSON