CVE-2025-54876 — Jans CLI stores plaintext passwords in the local cli_cmd.log file
The Janssen Project is an open-source identity and access management (IAM) platform. In versions 1.9.0 and below, Janssen stores passwords in plaintext in the local cli_cmd.log …
Published: 2025-08-05 · CVSS: 6.9 · CVSS 4.0
The Janssen Project is an open-source identity and access management (IAM) platform. In versions 1.9.0 and below, Janssen stores passwords in plaintext in the local cli_cmd.log file. This is fixed in the nightly prerelease.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7