Hi

I’m a security professional, working for an infrastructure provider for major financial institutions in Denmark. I’m tasked with doing a risk assessment (and subsequent security approval) of Zowe, and, as part of that, Zowe CLI.

I am reading through the documentation and learn that users can create profiles, saving them from retyping, among other things, username and password.

I am lacking a description of how that information is stored. Is it saved in a regular file? Is it in clear text? Please provide as many details as you can J

From what I can tell about the other aspects of operation of Zowe (and Zowe CLI) the culture around seems to be pretty security aware, so I keep my fingers crossed. J

Regards

”De dygtigste vinder sammen, stræber efter enkelhed, fokuseret på kundens bedste”