6.2med
CVE-2018-5239
Norton App Lock prior to v1.3.0.332 can be susceptible to a bypass exploit.
Published 8 y ago · modified 4 mo ago · JSON
CVSS
6.2
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.4%
percentile 33%
Public exploits
0
none known
Summary
Norton App Lock prior to v1.3.0.332 can be susceptible to a bypass exploit. In this type of circumstance, the exploit can allow the user to circumvent the app to prevent it from locking the device, thereby allowing the individual to gain device access.
Exploit prediction (EPSS)
0.39% probability of exploitation in the next 30 days, higher than 33% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 6.2 | CVSS:3.0/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 7.2 | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Affected products
- Symantec Corporation Norton App Lock
References
- securityfocus.com /bid/104693 · vdb-entry, x_refsource_BID, x_transferred
- support.symantec.com /en_US/article.SYMSA1455.html · x_refsource_CONFIRM, x_transferred
Sources
- CVE List: CVE-2018-5239
- NVD: CVE-2018-5239
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.