Skip to content
OpenAdvisories
Medium WID-SEC-2025-1821 2 CVEs

Palo Alto Networks Checkov by Prisma Cloud: Mehrere Schwachstellen

Published Aug 13, 2025 · Updated Aug 13, 2025 · de-DE

Vendor: Palo Alto Networks Product: Prisma Cloud

Summary

Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Palo Alto Networks Prisma Cloud ausnutzen, um beliebigen Code auszuführen und vertrauliche Informationen offenzulegen.

Product

Prisma Cloud ist eine Cloud-Native-Sicherheitsplattform (CNSP) zum Schutz von Anwendungen von der Erstellung bis zur Nutzung.

Vulnerabilities 2

  • Medium 5.1
    CVE-2025-2181

    Checkov by Prisma Cloud: Cleartext Exposure of Credentials

    A sensitive information disclosure vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can result in the cleartext exposure of Prisma Cloud access keys in Checkov's output.

    Palo Alto Networks Checkov by Prisma Cloud Network devices
  • Medium 4.8
    CVE-2025-2180

    Checkov by Prisma Cloud: Unsafe Deserialization of Terraform Files Allows Code Execution

    An unsafe deserialization vulnerability in Palo Alto Networks Checkov by Prisma® Cloud allows an authenticated user to execute arbitrary code as a non administrative user by scanning a malicious terraform file when using Checkov in Prisma® Cloud. This issue i…

    Palo Alto Networks Checkov by Prisma Cloud Network devices

Revision history

  1. #1

    Initiale Fassung

References