Palo Alto Networks Checkov by Prisma Cloud Sensitive Information Disclosure Vulnerability

A vulnerability allowing the cleartext exposure of Prisma Cloud access keys in the output of Checkov by Prisma Cloud has been identified. This issue affects Checkov versions 3.2.0 prior to 3.2.449.

Impact

Exploitation of this vulnerability leads to the unintentional disclosure of sensitive access keys in Checkov's output, which could be uploaded to insecure locations.

Remediation

Users can upgrade to Checkov by Prisma Cloud version 3.2.449 or later. After upgrading, it is recommended to rotate all Prisma Cloud access keys used by Checkov.