CVE-2021-3035

An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when processing a malicious terraform file. This issue impacts Checkov 2.0 versions earlier than Checkov 2.0.26. Checkov 1.0 versions are not impacted.

Score

CVSS 3.1 7.2 High

Status

Modified - psirt@paloaltonetworks.com

Published

2021-04-20

Last modified

2024-09-17

Weaknesses

CWE-502

Affected products

• Bridgecrew Checkov (Palo Alto Networks)
• Bridgecrew Checkov (Paloaltonetworks)

References

• https://security.paloaltonetworks.com/CVE-2021-3035