SB2018071621 - Input validation error in Symantec Norton App Lock
Published: July 16, 2018 Updated: August 8, 2020
Security Bulletin ID
SB2018071621
Severity
Medium
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Physical access
Highest impact
Code execution
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Input validation error (CVE-ID: CVE-2018-5239)
The vulnerability allows a local privileged user to execute arbitrary code.
Norton App Lock prior to v1.3.0.332 can be susceptible to a bypass exploit. In this type of circumstance, the exploit can allow the user to circumvent the app to prevent it from locking the device, thereby allowing the individual to gain device access.
Remediation
Install update from vendor's website.