Bypass Vulnerability in Norton App Lock Affects Device Security
CVE-2018-5239

6.2MEDIUM

Key Information:

Vendor
Symantec Corporation
Status
Norton App Lock
Vendor
CVE Published:
16 July 2018

Summary

Norton App Lock versions prior to 1.3.0.332 are susceptible to a vulnerability that can be exploited to bypass the application's locking mechanism. This allows unauthorized users to circumvent the lock and gain unrestricted access to the device. The exploit effectively compromises the protective measures intended to secure user data and applications, highlighting the need for prompt updates and awareness among users to maintain device integrity.

Affected Version(s)

Norton App Lock Prior to v1.3.0.332

References

http://www.securityfocus.com/bid/104693
vdb-entryx_refsource_BID
https://support.symantec.com/en_US/article.SYMSA1455.html
x_refsource_CONFIRM

CVSS V3.1

Score:
6.2
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.