I’m a security professional, working for an infrastructure provider for major financial institutions in Denmark. I’m tasked with doing a risk assessment (and subsequent security approval) of Zowe,
and, as part of that, Zowe CLI.
I am reading through the documentation and learn that users can create profiles, saving them from retyping, among other things, username and password.
I am lacking a description of how that information is stored. Is it saved in a regular file? Is it in clear text? Please provide as many details as you can
J
From what I can tell about the other aspects of operation of Zowe (and Zowe CLI) the culture around seems to be pretty security aware, so I keep my fingers crossed.
J