The App-ID cache feature in Palo Alto Networks PAN-OS prior to 4.0.14, 4.1.x prior to 4.1.11, and 5.0.x prior to 5.0.2 allows remote malicious users to bypass intended security policies via crafted requests that trigger invalid caching, as demonstrated by incorrect identification of HTTP traffic as SIP traffic, aka Ref ID 47195.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
paloaltonetworks pan-os 4.1.0 |
||
paloaltonetworks pan-os 4.1.2 |
||
paloaltonetworks pan-os 4.1.9 |
||
paloaltonetworks pan-os 4.1.3 |
||
paloaltonetworks pan-os 4.1.6 |
||
paloaltonetworks pan-os 4.1.7 |
||
paloaltonetworks pan-os 4.0.2 |
||
paloaltonetworks pan-os 5.0.0-h1 |
||
paloaltonetworks pan-os 4.1.8 |
||
paloaltonetworks pan-os 5.0.0 |
||
paloaltonetworks pan-os 4.1.4 |
||
paloaltonetworks pan-os 4.0.5 |
||
paloaltonetworks pan-os 4.1.1 |
||
paloaltonetworks pan-os 4.0.3 |
||
paloaltonetworks pan-os 4.0.0 |
||
paloaltonetworks pan-os 4.0.1 |
||
paloaltonetworks pan-os 4.0.7 |
||
paloaltonetworks pan-os 4.1.8-h3 |
||
paloaltonetworks pan-os 4.1.10 |
||
paloaltonetworks pan-os 4.1.5 |
||
paloaltonetworks pan-os |
||
paloaltonetworks pan-os 4.0.4 |
||
paloaltonetworks pan-os 4.0.6 |
Vulmon