CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-3040

An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when processing a malicious terraform file. This issue impacts Checkov 2.0 versions earlier than Checkov 2.0.139. Checkov 1.0 versions are not impacted.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.034

EPSS Ranking 86.9%

CVSS Severity

CVSS v3 Score 6.7

CVSS v2 Score 6.5

References

Products affected by CVE-2021-3040

Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.0

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.0
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.1

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.1
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.10

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.10
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.100

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.100
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.101

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.101
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.102

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.102
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.103

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.103
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.104

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.104
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.105

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.105
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.106

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.106
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.107

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.107
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.108

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.108
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.109

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.109
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.11

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.11
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.110

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.110
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.111

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.111
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.112

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.112
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.113

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.113
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.114

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.114
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.115

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.115
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.116

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.116
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.117

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.117
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.118

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.118
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.119

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.119
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.12

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.12
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.120

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.120
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.121

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.121
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.122

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.122
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.123

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.123
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.124

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.124
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.125

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.125
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.126

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.126
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.127

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.127
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.128

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.128
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.129

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.129
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.13

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.13
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.130

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.130
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.131

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.131
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.132

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.132
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.133

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.133
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.134

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.134
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.135

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.135
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.136

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.136
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.137

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.137
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.138

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.138
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.14

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.14
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.15

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.15
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.16

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.16
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.17

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.17
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.18

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.18
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.19

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.19
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.2

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.2
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.20

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.20
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.21

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.21
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.22

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.22
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.23

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.23
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.24

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.24
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.25

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.25
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.26

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.26
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.27

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.27
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.28

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.28
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.29

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.29
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.3

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.3
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.30

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.30
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.31

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.31
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.32

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.32
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.33

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.33
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.34

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.34
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.35

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.35
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.36

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.36
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.37

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.37
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.38

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.38
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.39

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.39
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.4

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.4
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.40

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.40
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.41

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.41
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.42

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.42
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.43

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.43
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.44

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.44
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.45

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.45
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.46

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.46
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.47

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.47
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.48

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.48
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.49

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.49
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.5

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.5
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.50

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.50
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.51

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.51
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.52

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.52
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.53

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.53
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.54

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.54
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.55

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.55
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.56

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.56
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.57

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.57
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.58

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.58
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.59

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.59
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.6

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.6
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.60

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.60
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.61

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.61
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.62

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.62
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.63

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.63
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.64

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.64
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.65

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.65
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.66

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.66
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.67

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.67
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.68

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.68
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.69

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.69
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.7

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.7
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.70

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.70
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.71

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.71
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.72

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.72
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.73

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.73
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.74

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.74
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.75

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.75
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.76

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.76
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.77

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.77
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.78

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.78
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.79

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.79
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.8

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.8
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.80

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.80
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.81

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.81
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.82

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.82
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.83

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.83
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.84

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.84
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.85

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.85
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.86

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.86
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.87

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.87
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.88

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.88
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.89

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.89
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.9

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.9
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.90

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.90
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.91

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.91
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.92

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.92
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.93

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.93
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.94

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.94
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.95

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.95
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.96

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.96
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.97

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.97
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.98

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.98
Paloaltonetworks » Bridgecrew Checkov » Version: 2.0.99

cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:2.0.99

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-3040

Products

Pricing

Contact Us