CVEvulnerability

CVE-2013-5663

4.3 MEDIUM Published 2013-08-31 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-08-31
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-264

Description

The App-ID cache feature in Palo Alto Networks PAN-OS before 4.0.14, 4.1.x before 4.1.11, and 5.0.x before 5.0.2 allows remote attackers to bypass intended security policies via crafted requests that trigger invalid caching, as demonstrated by incorrect identification of HTTP traffic as SIP traffic, aka Ref ID 47195.

Affected configurations

• paloaltonetworks pan-os (<= 4.0.8) • paloaltonetworks pan-os 4.0.0 • paloaltonetworks pan-os 4.0.1 • paloaltonetworks pan-os 4.0.2 • paloaltonetworks pan-os 4.0.3 • paloaltonetworks pan-os 4.0.4 • paloaltonetworks pan-os 4.0.5 • paloaltonetworks pan-os 4.0.6 • paloaltonetworks pan-os 4.0.7 • paloaltonetworks pan-os 4.1.0 • paloaltonetworks pan-os 4.1.1 • paloaltonetworks pan-os 4.1.2 • paloaltonetworks pan-os 4.1.3 • paloaltonetworks pan-os 4.1.4 • paloaltonetworks pan-os 4.1.5 • paloaltonetworks pan-os 4.1.6 • paloaltonetworks pan-os 4.1.7 • paloaltonetworks pan-os 4.1.8 • paloaltonetworks pan-os 4.1.8-h3 • paloaltonetworks pan-os 4.1.9 • paloaltonetworks pan-os 4.1.10 • paloaltonetworks pan-os 5.0.0 • paloaltonetworks pan-os 5.0.0-h1

Related

Weakness · not in database (1)

References