Skip to content
Sign in
6.7 Medium

CVE-2021-3040 An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when…

Description

An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when processing a malicious terraform file. This issue impacts Checkov 2.0 versions earlier than Checkov 2.0.139. Checkov 1.0 versions are not impacted.

Affected products and versions

Product Affected versions Fixed in
Bridgecrew Checkov 2.0 2.0 → < 2.0.139 2.0.139

Other CVEs of Bridgecrew Checkov

The 2 CVEs of Bridgecrew Checkov →
CVE-2021-3035 An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when… 6.7 Medium
Track this CVE