CVE-2025-2181

Checkov by Prisma Cloud: Cleartext Exposure of Credentials

Severity
Medium 5.9
CVSS 4.0
Exploited
Not listed
EPSS
0.002
5.3th percentile
Discovered by
Third party
Published by the vendor
Published
Aug 13, 2025
Assigned by palo_alto

Description

A sensitive information disclosure vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can result in the cleartext exposure of Prisma Cloud access keys in Checkov's output.

Weakness: CWE-312

Affected products

Vendor Product Category Matched by

No product mapping yet — this CVE is pending taxonomy review.

Vendor-reported affected versions (1)
  • Palo Alto Networks · Checkov by Prisma Cloud

Credit

Shashank Chaurasia

Vendor remediation

Version Minor Version Suggested Solution Checkov by Prisma Cloud 3.2 3.2.0 through 3.2.448 Upgrade to 3.2.449 or later. Checkov integration in Prisma Cloud is upgraded automatically when new versions become available. All Prisma Cloud access keys used by Checkov should be rotated after upgrading to a fixed version (this step is recommended for all modes of using Checkov).