CVE-2024-6916

Summary

CVE-2024-6916 is a newly disclosed vulnerability affecting Zowe CLI. This issue permits local, privileged users to view securely stored properties in cleartext via the '--show-inputs-only' flag. The flag, intended to hide sensitive input data, unfortunately has the unintended consequence of revealing this information in plain text instead. This vulnerability poses a risk to the confidentiality of sensitive data handled by Zowe CLI. Users are strongly advised to update their Zowe CLI installations as soon as a patch is available to mitigate this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.