CVE-2025-54876
Jans CLI stores plaintext passwords in the local cli_cmd.log file
Summary
Jans CLI stores plaintext passwords in the local cli_cmd.log file
Original description
The description as published by the source.
The Janssen Project is an open-source identity and access management (IAM) platform. In versions 1.9.0 and below, Janssen stores passwords in plaintext in the local cli_cmd.log file. This is fixed in the nightly prerelease.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- patch github.com
- web github.com