CVE-2025-54876
Jans CLI stores plaintext passwords in the local cli_cmd.log file
Résumé
Jans CLI stores plaintext passwords in the local cli_cmd.log file
Description d'origine
La description telle que publiée par la source (souvent en anglais).
The Janssen Project is an open-source identity and access management (IAM) platform. In versions 1.9.0 and below, Janssen stores passwords in plaintext in the local cli_cmd.log file. This is fixed in the nightly prerelease.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- patch github.com
- web github.com