CVE-2018-5239 : Norton App Lock prior to v1.3.0.332 can be susceptible to a bypass exploit. In t

Norton App Lock prior to v1.3.0.332 can be susceptible to a bypass exploit. In this type of circumstance, the exploit can allow the user to circumvent the app to prevent it from locking the device, thereby allowing the individual to gain device access.

Published 2018-07-16 17:29:01

Updated 2019-10-03 00:03:26

Source Symantec Corporation

View at NVD, CVE.org

Products affected by CVE-2018-5239

Symantec » Norton App Lock
Versions before (<) 1.3.0.332
cpe:2.3:a:symantec:norton_app_lock:*:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2018-5239

EPSS FAQ

0.05%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 12 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2018-5239

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C	3.9	10.0	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete
6.2	MEDIUM	CVSS:3.0/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	0.3	5.9	NIST
Attack Vector: Physical Attack Complexity: Low Privileges Required: High User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

References for CVE-2018-5239

http://www.securityfocus.com/bid/104693

Symantec Norton App Lock CVE-2018-5239 Local Security Bypass Vulnerability
Third Party Advisory;VDB Entry
https://support.symantec.com/en_US/article.SYMSA1455.html

Norton App Lock Bypass
Mitigation;Vendor Advisory

Jump to

Vulnerability Details : CVE-2018-5239

Products affected by CVE-2018-5239

Exploit prediction scoring system (EPSS) score for CVE-2018-5239

CVSS scores for CVE-2018-5239

References for CVE-2018-5239