NVD

Id
40923  
Name
CVE-2013-5663  
Description
The App-ID cache feature in Palo Alto Networks PAN-OS before 4.0.14, 4.1.x before 4.1.11, and 5.0.x before 5.0.2 allows remote attackers to bypass intended security policies via crafted requests that trigger invalid caching, as demonstrated by incorrect identification of HTTP traffic as SIP traffic, aka Ref ID 47195.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2013-08-31  
Modified Date
2013-09-30  
Seq
2013-5663  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
206885 40923 CVE-2013-5663 http://cansecwest.com/csw11/Network%20Application%20FW%20vs.%20Contemporary%20Threats%20(Brad%20Woodberg%20-%20Final).pptx  View
206886 40923 CVE-2013-5663 http://pastie.org/pastes/5568186/text  View
206887 40923 CVE-2013-5663 http://researchcenter.paloaltonetworks.com/2013/01/app-id-cache-pollution-update/  View
206888 40923 CVE-2013-5663 https://securityadvisories.paloaltonetworks.com/Home/Detail/19  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
22375 JVNDB-2013-003950 Palo Alto Networks PAN-OS の App-ID キャッシュ機能におけるセキュリティポリシーを回避される脆弱性 Palo Alto Networks PAN-OS の App-ID キャッシュ機能には、セキュリティポリシーを回避される脆弱性が存在します。 CVE-2013-5663 65605 CVE-2013-5663 40923 6.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003950.html 2013-01-07 2013-09-04 View