CVE-2021-3040

ALTO 7.2CVE-2021-3040 · Published 10/06/2021 · updated 17/06/2026

En resumen

CVE-2021-3040 es una vulnerabilidad ALTO (CVSS 7.2) que afecta a bridgecrew checkov (paloaltonetworks).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.3%, mayor que el 70.4% de las vulnerabilidades.
Solución: actualizar a 2.0.139 o posterior.

Package	Affected versions	Patched versions
bridgecrew checkov paloaltonetworks	`≥ 2.0.0, < 2.0.139`	`2.0.139`

Description

An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when processing a malicious terraform file. This issue impacts Checkov 2.0 versions earlier than Checkov 2.0.139. Checkov 1.0 versions are not impacted.

References

security.paloaltonetworks.com/CVE-2021-3040 · Vendor Advisory

Más vulnerabilidades de bridgecrew checkov

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free