Lucene search
+L

192 matches found

osv_cve
osv_cve
•added 2021/04/20 4:15 a.m.•41 views

CVE-2021-3035

An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when processing a malicious terraform file. This issue impacts Checkov 2.0 versions earlier than Checkov 2.0.26. Checkov 1.0 versions are not impacted...

7.2CVSS7.7AI score0.01295EPSS
SaveExploits0References1
NVD
NVD
•added 2021/04/20 4:15 a.m.•44 views

CVE-2021-3035

An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when processing a malicious terraform file. This issue impacts Checkov 2.0 versions earlier than Checkov 2.0.26. Checkov 1.0 versions are not impacted...

7.2CVSS0.01295EPSS
SaveExploits0References1
Prion
Prion
•added 2021/04/20 4:15 a.m.•37 views

Deserialization of untrusted data

An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when processing a malicious terraform file. This issue impacts Checkov 2.0 versions earlier than Checkov 2.0.26. Checkov 1.0 versions are not impacted...

6.5CVSS7.2AI score0.01295EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/04/20 3:15 a.m.•46 views

CVE-2021-3035 Bridgecrew Checkov: Unsafe deserialization of Terraform files allows code execution

An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when processing a malicious terraform file. This issue impacts Checkov 2.0 versions earlier than Checkov 2.0.26. Checkov 1.0 versions are not impacted...

6.7CVSS7.5AI score0.01295EPSS
SaveExploits0References1
CVE
CVE
•added 2021/04/20 3:15 a.m.•125 views

CVE-2021-3035

Bridgecrew Checkov (CVE-2021-3035) is affected by an unsafe deserialization vulnerability that enables arbitrary code execution when processing a malicious Terraform file. The issue impacts Checkov 2.0 releases earlier than 2.0.26; Checkov 1.0 is not affected. Root cause is unsafe/deserialization...

7.2CVSS7.1AI score0.01295EPSS
SaveExploits0References1Affected Software1
Mend
Mend
•added 2021/04/20 3:15 a.m.•12 views

CVE-2021-3035

An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when processing a malicious terraform file. This issue impacts Checkov 2.0 versions earlier than Checkov 2.0.26. Checkov 1.0 versions are not impacted...

8.6CVSS0.01295EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/04/20 12:00 a.m.•30 views

PT-2021-18716

Name of the Vulnerable Software and Affected Versions Checkov versions prior to 2.0.26 Description An unsafe deserialization issue allows arbitrary code execution when processing a malicious terraform file. Recommendations For versions prior to 2.0.26, update to version 2.0.26 or later to resolve...

7.2CVSS6.3AI score0.01295EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/20 12:00 a.m.•8 views

CVE-2021-3035: Deserialization of Untrusted Data

An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when processing a malicious terraform file. This issue impacts Checkov 2.0 versions earlier than Checkov 2.0.26. Checkov 1.0 versions are not impacted...

7.2CVSS6.3AI score0.01295EPSS
SaveExploits0References3
CNVD
CNVD
•added 2021/04/19 12:00 a.m.•22 views

Bridgecrew Checkov Has a Remote Code Execution Vulnerability

checkov a software application. Static code analysis tool for infrastructure i.e. code. Bridgecrew Checkov suffers from a remote code execution vulnerability that can be exploited by an attacker to execute arbitrary code while processing a malicious terraform file...

7.2CVSS8.2AI score0.01295EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/04/14 4:00 p.m.•24 views

CVE-2021-3035

An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when processing a malicious terraform file. This issue impacts Checkov 2.0 versions earlier than Checkov 2.0.26. Checkov 1.0 versions are not impacted...

7.2CVSS7.7AI score0.01295EPSS
SaveExploits0References2Affected Software1
Palo Alto Networks
Palo Alto Networks
•added 2021/04/14 4:00 p.m.•132 views

Bridgecrew Checkov: Unsafe deserialization of Terraform files allows code execution

An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when processing a malicious terraform file. This issue impacts Checkov 2.0 versions earlier than Checkov 2.0.26. Checkov 1.0 versions are not impacted. Work around: Do not run Checkov on...

7.2CVSS6AI score0.01295EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/04/14 12:00 a.m.•24 views

Bridgecrew Checkov Code Issues and Vulnerabilities

checkov a software application. Static code analysis tool for infrastructure i.e. code. Bridgecrew Checkov suffers from a remote code execution vulnerability that can be exploited by an attacker to execute arbitrary code while processing a malicious terraform file...

7.2CVSS6.9AI score0.01295EPSS
SaveExploits0References4
Rows per page
Query Builder