PT-2017-14089 · Norton · Norton Family Android App

Publicado 2017-12-13 · Atualizado 2017-12-27 · CVE-2017-15530

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Baixa

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Norton Family Android App versions prior to 4.4.1.10

Description The issue concerns an information disclosure problem, which is a common target for attackers as they probe the application. Attackers may exploit this to gather sensitive information such as error messages, system information, user data, version numbers, component names, URL paths, or other details that could be used to their advantage.

Recommendations For versions prior to 4.4.1.10, update to version 4.4.1.10 or later to resolve the issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2017-15530

Produtos afetados

Norton Family Android App

Referências · 4

• https://symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20171213_00 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-15530 · Nota de Segurança
• http://securityfocus.com/bid/102120 · Nota
• https://osv.dev/vulnerability/CVE-2017-15530 · Aviso do Fabricante