Lucene search
+L

25 matches found

CVE
CVE
added 2021/04/20 3:15 a.m.101 views

CVE-2021-3035

Bridgecrew Checkov (CVE-2021-3035) is affected by an unsafe deserialization vulnerability that enables arbitrary code execution when processing a malicious Terraform file. The issue impacts Checkov 2.0 releases earlier than 2.0.26; Checkov 1.0 is not affected. Root cause is unsafe/deserialization...

7.2CVSS7.1AI score0.01295EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
added 2021/04/19 12:00 a.m.14 views

Bridgecrew Checkov Has a Remote Code Execution Vulnerability

checkov a software application. Static code analysis tool for infrastructure i.e. code. Bridgecrew Checkov suffers from a remote code execution vulnerability that can be exploited by an attacker to execute arbitrary code while processing a malicious terraform file...

7.2CVSS8.2AI score0.01295EPSS
SaveExploits0References1
Palo Alto Networks
Palo Alto Networks
added 2021/04/14 4:00 p.m.85 views

Bridgecrew Checkov: Unsafe deserialization of Terraform files allows code execution

An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when processing a malicious terraform file. This issue impacts Checkov 2.0 versions earlier than Checkov 2.0.26. Checkov 1.0 versions are not impacted. Work around: Do not run Checkov on...

7.2CVSS6AI score0.01295EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/04/14 4:00 p.m.10 views

CVE-2021-3035

An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when processing a malicious terraform file. This issue impacts Checkov 2.0 versions earlier than Checkov 2.0.26. Checkov 1.0 versions are not impacted...

7.2CVSS7.7AI score0.01295EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2021/04/14 12:00 a.m.11 views

Bridgecrew Checkov 代码问题漏洞

checkov a software application. Static code analysis tool for infrastructure i.e. code. Bridgecrew Checkov suffers from a remote code execution vulnerability that can be exploited by an attacker to execute arbitrary code while processing a malicious terraform file...

7.2CVSS6.9AI score0.01295EPSS
SaveExploits0References4
Rows per page
Query Builder