4.8
Moyenne
CVE-2025-2180 An unsafe deserialization vulnerability in Palo Alto Networks Checkov by Prisma® Cloud allows an authenticated user to…
Description
An unsafe deserialization vulnerability in Palo Alto Networks Checkov by Prisma® Cloud allows an authenticated user to execute arbitrary code as a non administrative user by scanning a malicious terraform file when using Checkov in Prisma® Cloud. This issue impacts Checkov 3.0 versions earlier than Checkov 3.2.415.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Checkov by Prisma Cloud 3.2 | 3.2.0 → < 3.2.415 | 3.2.415 |
Autres CVE de Checkov by Prisma Cloud
Les 6 CVE de Checkov by Prisma Cloud →
CVE-2026-0311
A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local…
1.1
Faible
CVE-2026-0312
Path traversal vulnerabilities in Palo Alto Networks Checkov by Prisma® Cloud enable an unauthenticated local user to…
4.3
Moyenne
CVE-2026-0302
An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local user to execute…
1.1
Faible
CVE-2026-0303
A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when…
2.4
Faible