Zowe CLI profile data at rest


Morten Schiønning
 

Hi

 

I’m a security professional, working for an infrastructure provider for major financial institutions in Denmark. I’m tasked with doing a risk assessment (and subsequent security approval) of Zowe, and, as part of that, Zowe CLI.

 

I am reading through the documentation and learn that users can create profiles, saving them from retyping, among other things, username and password.

 

I am lacking a description of how that information is stored. Is it saved in a regular file? Is it in clear text? Please provide as many details as you can J

 

From what I can tell about the other aspects of operation of Zowe (and Zowe CLI) the culture around seems to be pretty security aware, so I keep my fingers crossed. J

 

Regards

 

Venlig hilsen

Morten Schiønning

Sikkerhedskonsulent, Security & Compliance

Direkte +45 6363 9394

Mobile +45 5179 4116

msc@...

”De dygtigste vinder sammen, stræber efter enkelhed, fokuseret på kundens bedste”

 

JN Data A/S

·

Havsteensvej 4

·

4000 Roskilde

Telefon 63 63 63 63/ Fax 63 63 63 64

www.jndata.dk

 

jndata_new1

 

Join zowe-user@lists.openmainframeproject.org to automatically receive all group messages.