CVE-2025-2181: falha de média gravidade em Palo Alto Networks Checkov by Prisma Cloud
Checkov by Prisma Cloud: Cleartext Exposure of Credentials
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.9epss 0.2%
A sensitive information disclosure vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can result in the cleartext exposure of Prisma Cloud access keys in Checkov's output.
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:L/SI:L/SA:L/AU:N/R:U/V:D/RE:M/U:Amber
Produtos afetados
Palo Alto Networks · Checkov by Prisma CloudCVEs relacionadas — Palo Alto Networks Checkov by Prisma Cloud
No mesmo produto, das mais perigosas para as menos.
CVE-2026-0302LOWCheckov by Prisma Cloud: OS Command Injection VulnerabilityEPSS 0.8%CVE-2026-0303LOWCheckov by Prisma Cloud: Code Execution via Auto-Loaded Configuration FileEPSS 0.2%CVE-2025-2180MEDIUMCheckov by Prisma Cloud: Unsafe Deserialization of Terraform Files Allows Code ExecutionEPSS 0.2%CVE-2026-0312MEDIUMCheckov by Prisma Cloud: Path Traversal VulnerabilitiesEPSS 0.1%CVE-2026-0311LOWCheckov by Prisma Cloud: Server-Side Request Forgery VulnerabilityEPSS 0.1%