{"action":"Upgrade @zowe/cli to 7.23.5 or later.","affected":[{"fixed":"7.23.5","introduced":"7.18.0"}],"component":"@zowe/cli","cve_ids":["CVE-2024-6833"],"ecosystem":"npm","epss":0.00141,"exploited":false,"fixed_versions":["7.23.5"],"ghsa_id":"GHSA-ghgq-x6wc-6jr5","id":"tcs_01M5KFRS4C4BKXNAHGN6TVGRRB","modified_at":"2024-07-17T19:56:53.346411Z","published_at":"2024-07-17T15:30:52Z","references":["https://osv.dev/vulnerability/GHSA-ghgq-x6wc-6jr5","https://nvd.nist.gov/vuln/detail/CVE-2024-6833","https://github.com/zowe/zowe-cli/commit/6778da5e03c65dfcd3e6e4b4097b94d9fbd5d01b","https://github.com/zowe/zowe-cli"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-ghgq-x6wc-6jr5","url":"https://osv.dev/vulnerability/GHSA-ghgq-x6wc-6jr5"}],"summary":"Zowe CLI allows storage of previously entered secure credentials in a plaintext file"}