Skip to content
fr Sign in
6.7 Medium

CVE-2021-3035 An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when…

Description

An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when processing a malicious terraform file. This issue impacts Checkov 2.0 versions earlier than Checkov 2.0.26. Checkov 1.0 versions are not impacted.

Affected products and versions

Product Affected versions Fixed in
Bridgecrew Checkov 2.0 2.0 → < 2.0.26 2.0.26

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Bridgecrew Checkov

The 2 CVEs of Bridgecrew Checkov →
CVE-2021-3040 An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when… 6.7 Medium
Track this CVE