CVE Vulnerabilities

CVE-2013-5663

Published: Aug 31, 2013 | Modified: Apr 11, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu
root.io minimus.io echohq.com

The App-ID cache feature in Palo Alto Networks PAN-OS before 4.0.14, 4.1.x before 4.1.11, and 5.0.x before 5.0.2 allows remote attackers to bypass intended security policies via crafted requests that trigger invalid caching, as demonstrated by incorrect identification of HTTP traffic as SIP traffic, aka Ref ID 47195.

Affected Software

Name Vendor Start Version End Version
Pan-os Paloaltonetworks * 4.0.8 (including)
Pan-os Paloaltonetworks 4.0.0 (including) 4.0.0 (including)
Pan-os Paloaltonetworks 4.0.1 (including) 4.0.1 (including)
Pan-os Paloaltonetworks 4.0.2 (including) 4.0.2 (including)
Pan-os Paloaltonetworks 4.0.3 (including) 4.0.3 (including)
Pan-os Paloaltonetworks 4.0.4 (including) 4.0.4 (including)
Pan-os Paloaltonetworks 4.0.5 (including) 4.0.5 (including)
Pan-os Paloaltonetworks 4.0.6 (including) 4.0.6 (including)
Pan-os Paloaltonetworks 4.0.7 (including) 4.0.7 (including)
Pan-os Paloaltonetworks 4.1.0 (including) 4.1.0 (including)
Pan-os Paloaltonetworks 4.1.1 (including) 4.1.1 (including)
Pan-os Paloaltonetworks 4.1.2 (including) 4.1.2 (including)
Pan-os Paloaltonetworks 4.1.3 (including) 4.1.3 (including)
Pan-os Paloaltonetworks 4.1.4 (including) 4.1.4 (including)
Pan-os Paloaltonetworks 4.1.5 (including) 4.1.5 (including)
Pan-os Paloaltonetworks 4.1.6 (including) 4.1.6 (including)
Pan-os Paloaltonetworks 4.1.7 (including) 4.1.7 (including)
Pan-os Paloaltonetworks 4.1.8 (including) 4.1.8 (including)
Pan-os Paloaltonetworks 4.1.8-h3 (including) 4.1.8-h3 (including)
Pan-os Paloaltonetworks 4.1.9 (including) 4.1.9 (including)
Pan-os Paloaltonetworks 4.1.10 (including) 4.1.10 (including)
Pan-os Paloaltonetworks 5.0.0 (including) 5.0.0 (including)
Pan-os Paloaltonetworks 5.0.0-h1 (including) 5.0.0-h1 (including)

References