6.7med
CVE-2017-15534
The Norton App Lock prior to version 1.3.0.13 can be susceptible to an authentication bypass exploit.
Published 8 y ago · modified 4 mo ago · JSON
CVSS
6.7
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.4%
percentile 35%
Public exploits
0
none known
Summary
The Norton App Lock prior to version 1.3.0.13 can be susceptible to an authentication bypass exploit. In this type of circumstance, the exploit can allow the user to kill the app to prevent it from locking the device, thereby allowing the individual to gain device access.
Exploit prediction (EPSS)
0.40% probability of exploitation in the next 30 days, higher than 35% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 6.7 | CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 7.2 | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Affected products
- Symantec Corporation Norton App Lock
Classification
- Weakness
- CWE-287 Improper Authentication
References
- symantec.com /security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory · x_refsource_CONFIRM, x_transferred
- securityfocus.com /bid/103377 · vdb-entry, x_refsource_BID, x_transferred
Sources
- CVE List: CVE-2017-15534
- NVD: CVE-2017-15534
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.