Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
A vulnerability in Imperative framework which allows already-privileged local actors to execute arbitrary shell commands via plugin install/update commands, or maliciously formed environment variables. Impacts Zowe CLI.