Lucene search

[email protected]CVE-2013-5663

HistoryAug 31, 2013 - 5:55 p.m.

CVE-2013-5663

2013-08-3117:55:03

CWE-264

[email protected]

web.nvd.nist.gov

cve-2013-5663

palo alto networks

pan-os

security policies

remote attackers

crafted requests

invalid caching

ref id 47195

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

7 High

AI Score

Confidence

Low

0.018 Low

EPSS

Percentile

88.1%

JSON

The App-ID cache feature in Palo Alto Networks PAN-OS before 4.0.14, 4.1.x before 4.1.11, and 5.0.x before 5.0.2 allows remote attackers to bypass intended security policies via crafted requests that trigger invalid caching, as demonstrated by incorrect identification of HTTP traffic as SIP traffic, aka Ref ID 47195.

Affected configurations

NVD

Node

paloaltonetworkspan-osRange≤4.0.8

paloaltonetworkspan-osMatch4.0.0

paloaltonetworkspan-osMatch4.0.1

paloaltonetworkspan-osMatch4.0.2

paloaltonetworkspan-osMatch4.0.3

paloaltonetworkspan-osMatch4.0.4

paloaltonetworkspan-osMatch4.0.5

paloaltonetworkspan-osMatch4.0.6

paloaltonetworkspan-osMatch4.0.7

paloaltonetworkspan-osMatch4.1.0

paloaltonetworkspan-osMatch4.1.1

paloaltonetworkspan-osMatch4.1.2

paloaltonetworkspan-osMatch4.1.3

paloaltonetworkspan-osMatch4.1.4

paloaltonetworkspan-osMatch4.1.5

paloaltonetworkspan-osMatch4.1.6

paloaltonetworkspan-osMatch4.1.7

paloaltonetworkspan-osMatch4.1.8

paloaltonetworkspan-osMatch4.1.8-h3

paloaltonetworkspan-osMatch4.1.9

paloaltonetworkspan-osMatch4.1.10

paloaltonetworkspan-osMatch5.0.0

paloaltonetworkspan-osMatch5.0.0-h1

CPENameOperatorVersion
paloaltonetworks:pan-ospaloaltonetworks pan-osle4.0.8
paloaltonetworks:pan-ospaloaltonetworks pan-oseq4.0.0
paloaltonetworks:pan-ospaloaltonetworks pan-oseq4.0.1
paloaltonetworks:pan-ospaloaltonetworks pan-oseq4.0.2
paloaltonetworks:pan-ospaloaltonetworks pan-oseq4.0.3
paloaltonetworks:pan-ospaloaltonetworks pan-oseq4.0.4
paloaltonetworks:pan-ospaloaltonetworks pan-oseq4.0.5
paloaltonetworks:pan-ospaloaltonetworks pan-oseq4.0.6
paloaltonetworks:pan-ospaloaltonetworks pan-oseq4.0.7
paloaltonetworks:pan-ospaloaltonetworks pan-oseq4.1.0

CPE	Name	Operator	Version
paloaltonetworks:pan-os	paloaltonetworks pan-os	le	4.0.8
paloaltonetworks:pan-os	paloaltonetworks pan-os	eq	4.0.0
paloaltonetworks:pan-os	paloaltonetworks pan-os	eq	4.0.1
paloaltonetworks:pan-os	paloaltonetworks pan-os	eq	4.0.2
paloaltonetworks:pan-os	paloaltonetworks pan-os	eq	4.0.3
paloaltonetworks:pan-os	paloaltonetworks pan-os	eq	4.0.4
paloaltonetworks:pan-os	paloaltonetworks pan-os	eq	4.0.5
paloaltonetworks:pan-os	paloaltonetworks pan-os	eq	4.0.6
paloaltonetworks:pan-os	paloaltonetworks pan-os	eq	4.0.7
paloaltonetworks:pan-os	paloaltonetworks pan-os	eq	4.1.0