CVE-2013-5663
N/A
N/A
Summary
The App-ID cache feature in Palo Alto Networks PAN-OS before 4.0.14, 4.1.x before 4.1.11, and 5.0.x before 5.0.2 allows remote attackers to bypass intended security policies via crafted requests that trigger invalid caching, as demonstrated by incorrect identification of HTTP traffic as SIP traffic, aka Ref ID 47195.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- http://researchcenter.paloaltonetworks.com/2013/01/app-id-cache-pollution-update/
- http://pastie.org/pastes/5568186/text
- http://cansecwest.com/csw11/Network%20Application%20FW%20vs.%20Contemporary%20Threats%20%28Brad%20Woodberg%20-%20Final%29.pptx
- https://security.paloaltonetworks.com/CVE-2013-5663
References
- http://researchcenter.paloaltonetworks.com/2013/01/app-id-cache-pollution-update/
- http://pastie.org/pastes/5568186/text
- http://cansecwest.com/csw11/Network%20Application%20FW%20vs.%20Contemporary%20Threats%20%28Brad%20Woodberg%20-%20Final%29.pptx
- https://security.paloaltonetworks.com/CVE-2013-5663
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.