PT-2017-14086 · Symantec · Norton Security

Published 2017-11-22 · Updated 2020-08-12 · CVE-2017-15528

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Norton Security versions prior to 7.6

Description The issue concerns a certificate spoofing vulnerability, which is a type of attack where a maliciously procured certificate binds the public key of an attacker to the domain name of the target.

Recommendations For versions prior to 7.6, update to version 7.6 or later to resolve the issue.

Fix

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

CVE-2017-15528

Affected Products

Norton Security

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2017-15528 · Security Note
• https://osv.dev/vulnerability/CVE-2017-15528 · Vendor Advisory
• https://symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20171121_00 · Vendor Advisory
• https://info-sec.ca/advisories/Norton-Security.html · Note
• http://securityfocus.com/bid/101796 · Note