PT-2019-3399 · Norton · Norton Password Manager

Published 2019-07-16 · Updated 2021-07-21 · CVE-2019-9700

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Norton Password Manager versions prior to 6.3.0.2082

Description The issue is related to errors in IP packet processing, which may allow a remote attacker to spoof their IP address, disguising their origin and obscuring the source of network traffic. This could potentially enable an attacker to hide their identity.

Recommendations For versions prior to 6.3.0.2082, update to version 6.3.0.2082 or later to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2019-03549

CVE-2019-9700

Affected Products

Norton Password Manager

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2019-9700 · Security Note
• https://osv.dev/vulnerability/CVE-2019-9700 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-03549 · Security Note
• https://support.symantec.com/us/en/article.SYMSA1483.html · Vendor Advisory
• https://cxsecurity.com/cveshow/CVE-2019-3571 · Note