Information disclosure in Symantec Norton Family
CVE-2017-15530
Prior to 4.4.1.10, the Norton Family Android App can be susceptible to an Information Disclosure issue. Information disclosure is a very common issue that attackers will attempt to exploit as a first pass across the application. As they probe the application they will take note of anything that may seem out of place or any bit of information they can use to their advantage such as error messages, system information, user data, version numbers, component names, URL paths, or even simple typos and misspellings.
Vulnerability class: Information Disclosure
Published · last modified .
CVSS v3 metric
CVSS v3 base score 3.3 (Low). Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N.
EPSS exploit prediction
EPSS: 0.003 (25.4th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 25th percentile — 25.4% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.003 · newest: 0.003 · change: 0.000
Affected products
- Symantec Norton Family
- Symantec Corporation Norton Family Android App — versions Prior to 4.4.1.10
Weakness classification (CWE)
References
- www.symantec.com/security_response/securityupdates/detail.jsp (Vendor Advisory)
- www.securityfocus.com/bid/102120 (VDB Entry, Third Party Advisory, vdb-entry)
Frequently asked questions
- What is CVE-2017-15530?
- CVE-2017-15530 is a low-severity vulnerability in Symantec Norton Family, classified under Information Disclosure. CVSS score: 3.3/10. Published 2017-12-13.
- How severe is CVE-2017-15530?
- Low severity. CVSS v3 base score is 3.3 out of 10.