← CVE Intelligence

CVE-2021-3040

Bridgecrew Checkov: Unsafe deserialization of Terraform files allows code execution PUBLISHED

Description (CNA)

An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when processing a malicious terraform file. This issue impacts Checkov 2.0 versions earlier than Checkov 2.0.139. Checkov 1.0 versions are not impacted.

Affected (CNA)

Vendor / productVersions
Palo Alto Networks / Bridgecrew Checkovunaffected 1.0 all; affected 2.0 before 2.0.139

CWE

CWE-502

References

ADP enrichment

CVE

No English description supplied.