CVE-2025-2181
Checkov by Prisma Cloud: Cleartext Exposure of Credentials
Description
A sensitive information disclosure vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can result in the cleartext exposure of Prisma Cloud access keys in Checkov's output.
Weakness: CWE-312
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Palo Alto Networks | Prisma Cloud | Cloud Security | cna-assigner |
Vendor-reported products (1)
- Palo Alto Networks · Checkov by Prisma Cloud
Credit
Shashank Chaurasia
Vendor remediation
Version Minor Version Suggested Solution Checkov by Prisma Cloud 3.2 3.2.0 through 3.2.448 Upgrade to 3.2.449 or later. Checkov integration in Prisma Cloud is upgraded automatically when new versions become available. All Prisma Cloud access keys used by Checkov should be rotated after upgrading to a fixed version (this step is recommended for all modes of using Checkov).