PT-2017-14089 · Norton · Norton Family Android App

Published 2017-12-13 · Updated 2017-12-27 · CVE-2017-15530

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Norton Family Android App versions prior to 4.4.1.10

Description The issue concerns an information disclosure problem, which is a common target for attackers as they probe the application. Attackers may exploit this to gather sensitive information such as error messages, system information, user data, version numbers, component names, URL paths, or other details that could be used to their advantage.

Recommendations For versions prior to 4.4.1.10, update to version 4.4.1.10 or later to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2017-15530

Affected Products

Norton Family Android App

References · 4

• https://symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20171213_00 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-15530 · Security Note
• https://osv.dev/vulnerability/CVE-2017-15530 · Vendor Advisory
• http://securityfocus.com/bid/102120 · Note