CVE-2016-6587

Опубликовано: 08 янв. 2020

Источник: nvd

CVSS3: 5.5

CVSS2: 2.1

EPSS Низкий

Описание

An Information Disclosure vulnerability exists in the mid.dat file stored on the SD card in Symantec Norton Mobile Security for Android before 3.16, which could let a local malicious user obtain sensitive information.

Ссылки

http://www.securityfocus.com/bid/93858
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1037225
Third Party Advisory
VDB Entry
https://support.symantec.com/us/en/article.symsa1384.html
Third Party Advisory
https://vuldb.com/?id.93273
Permissions Required
Third Party Advisory
http://www.securityfocus.com/bid/93858
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1037225
Third Party Advisory
VDB Entry
https://support.symantec.com/us/en/article.symsa1384.html
Third Party Advisory
https://vuldb.com/?id.93273
Permissions Required
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:symantec:norton_mobile_security:*:*:*:*:*:android:*:*

Версия до 3.16 (исключая)

EPSS

Процентиль: 33%

0.00131

Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-9hjc-v342-97r7

github

больше 3 лет назад