PT-2019-4418 · Norton · Norton App Lock
Publicado
2019-11-13
·
Atualizado
2019-11-20
·
CVE-2019-18373
CVSS v3.1
5.6
Média
| Vetor | AV:P/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:L |
Name of the Vulnerable Software and Affected Versions
Norton App Lock versions prior to 1.4.0.503
Description
The issue is related to insecure privilege management in the Norton App Lock utility. This can be exploited to bypass the app lock, allowing unauthorized access to the device. The exploit can enable a user to circumvent the app, preventing it from locking other apps on the device.
Recommendations
For versions prior to 1.4.0.503, update to version 1.4.0.503 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive areas of the device to minimize the risk of exploitation.
Correção
Improper Privilege Management
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Norton App Lock