CyberSecBulletin

Zhmcclient vulnerabilities

We track 2 vulnerabilities in Zhmcclient products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 29, 2024.

2vulnerabilities
0critical
2high
0exploited
8.2average CVSS score

Latest Zhmcclient vulnerabilities

  • 8.2 High severity

    zhmc-ansible-modules: Cleartext Storage of Sensitive Information

    CVE-2024-53979Zhmcclient

    ibm.ibm_zhmc is an Ansible collection for the IBM Z HMC. The Ansible collection "ibm.ibm_zhmc" writes password-like properties in clear text into its log file and into the output returned by some of its Ansible module in the following cases: 1. The 'boot_ftp_p

  • 8.2 High severity

    python-zhmcclient: Cleartext Storage of Sensitive Information

    CVE-2024-53865Zhmcclient

    zhmcclient is a pure Python client library for the IBM Z HMC Web Services API. In affected versions the Python package "zhmcclient" writes password-like properties in clear text into its HMC and API logs in the following cases: 1. The 'boot-ftp-password' and '