CVE-2013-5663
31.08.2013, 17:55
The App-ID cache feature in Palo Alto Networks PAN-OS before 4.0.14, 4.1.x before 4.1.11, and 5.0.x before 5.0.2 allows remote attackers to bypass intended security policies via crafted requests that trigger invalid caching, as demonstrated by incorrect identification of HTTP traffic as SIP traffic, aka Ref ID 47195.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| paloaltonetworks | pan-os | 𝑥 ≤ 4.0.8 |
| paloaltonetworks | pan-os | 4.0.0 |
| paloaltonetworks | pan-os | 4.0.1 |
| paloaltonetworks | pan-os | 4.0.2 |
| paloaltonetworks | pan-os | 4.0.3 |
| paloaltonetworks | pan-os | 4.0.4 |
| paloaltonetworks | pan-os | 4.0.5 |
| paloaltonetworks | pan-os | 4.0.6 |
| paloaltonetworks | pan-os | 4.0.7 |
| paloaltonetworks | pan-os | 4.1.0 |
| paloaltonetworks | pan-os | 4.1.1 |
| paloaltonetworks | pan-os | 4.1.2 |
| paloaltonetworks | pan-os | 4.1.3 |
| paloaltonetworks | pan-os | 4.1.4 |
| paloaltonetworks | pan-os | 4.1.5 |
| paloaltonetworks | pan-os | 4.1.6 |
| paloaltonetworks | pan-os | 4.1.7 |
| paloaltonetworks | pan-os | 4.1.8 |
| paloaltonetworks | pan-os | 4.1.8-h3 |
| paloaltonetworks | pan-os | 4.1.9 |
| paloaltonetworks | pan-os | 4.1.10 |
| paloaltonetworks | pan-os | 5.0.0 |
| paloaltonetworks | pan-os | 5.0.0-h1 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References