CVE-2013-5663 | BDVDB-2026-57222 Detail

Description#

The App-ID cache feature in Palo Alto Networks PAN-OS before 4.0.14, 4.1.x before 4.1.11, and 5.0.x before 5.0.2 allows remote attackers to bypass intended security policies via crafted requests that trigger invalid caching, as demonstrated by incorrect identification of HTTP traffic as SIP traffic, aka Ref ID 47195.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://researchcenter.paloaltonetworks.com/2013/01/app-id-cache-pollution-update/
http://pastie.org/pastes/5568186/text
http://cansecwest.com/csw11/Network%20Application%20FW%20vs.%20Contemporary%20Threats%20%28Brad%20Woodberg%20-%20Final%29.pptx
https://security.paloaltonetworks.com/CVE-2013-5663

Exploit#

No public exploit known

History#

Version 12013-08-31Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.