VULNERABILITY INTELLIGENCE
CVE-2017-15534
CVSS score6.7 MEDIUM
EPSS probability0.40%
CISA KEVNot currently listed
Published2018-03-26
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Description
The Norton App Lock prior to version 1.3.0.13 can be susceptible to an authentication bypass exploit. In this type of circumstance, the exploit can allow the user to kill the app to prevent it from locking the device, thereby allowing the individual to gain device access.
Weakness classification
- CWE-287: Improper Authentication
Primary references
- secure@symantec.com — Third Party Advisory, VDB Entry
- secure@symantec.com — Mitigation, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Mitigation, Vendor Advisory