A security vulnerability identified in Tenable Terrascan v1 poses a significant risk to infrastructure-as-code scanning environments.

The provided data is insufficient to categorize the specific vulnerability type; however, given the CVSS score of 7.5, it represents a high-severity security flaw that could compromise scanning integrity.

The vulnerability carries a CVSS score of 7.5, indicating a high potential for operational disruption or unauthorized access to security scanning workflows. If exploited, attackers could manipulate security configurations, potentially allowing insecure infrastructure deployments to bypass automated governance checks.

Immediate Action: Consult the official Tenable security advisory to identify and apply the latest available version or hotfix for Terrascan.

Proactive Monitoring: Audit logs for unauthorized access to the scanning environment and track any unexpected changes to policy-as-code configurations.

Compensating Controls: Restrict access to the Terrascan management interface to authorized personnel only and ensure the service is deployed within a protected network segment.

Public Exploit Available: false

Given the lack of specific technical details, administrators must prioritize reviewing vendor communications from Tenable. Apply all available security updates immediately to mitigate potential risks to your security scanning infrastructure.