6.7 Medium

CVE-2021-3035 An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when…

Description

An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when processing a malicious terraform file. This issue impacts Checkov 2.0 versions earlier than Checkov 2.0.26. Checkov 1.0 versions are not impacted.

Affected products and versions

Product	Affected versions	Fixed in
Bridgecrew Checkov 2.0	2.0 → < 2.0.26	2.0.26

The 2 CVEs of Bridgecrew Checkov →

CVE-2021-3040 An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when… 6.7 Medium

Do you use Bridgecrew Checkov?

Track this CVE Watch Bridgecrew Checkov Check my SBOMs

www.cveye.io/en/cve/CVE-2021-3035

Timeline

Published April 20, 2021
Last modified September 17, 2024

References

security.paloaltonetworks.com security.paloaltonetworks.com

Track this CVE

CVE-2021-3035 An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when…

Description

Affected products and versions

Other CVEs of Bridgecrew Checkov