Palo Alto Networks Bridgecrew Checkov vulnerabilities

2 CVEs affecting Palo Alto Networks Bridgecrew Checkov, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-3040, published 2021-06-10.

More from Palo Alto Networks.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-3040, published 2021-06-10. High severity, CVSS 7.2. EPSS: 1.3% chance of exploitation in the next 30 days. An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when processing a malicious terraform file. This issue impacts Checkov 2.0 versions…
• CVE-2021-3035, published 2021-04-20. High severity, CVSS 7.2. EPSS: 1.3% chance of exploitation in the next 30 days. An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when processing a malicious terraform file. This issue impacts Checkov 2.0 versions…