CVE-2021-3040

An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when processing a malicious terraform file. This issue impacts Checkov 2.0 versions earlier than Checkov 2.0.139. Checkov 1.0 versions are not impacted.

Score

CVSS 3.1 7.2 High

Status

Modified - psirt@paloaltonetworks.com

Published

2021-06-10

Last modified

2024-09-16

Weaknesses

CWE-502

Affected products

• Bridgecrew Checkov (Palo Alto Networks)
• Bridgecrew Checkov (Paloaltonetworks)

References

• https://security.paloaltonetworks.com/CVE-2021-3040