{"containers": {"cna": {"affected": [{"product": "Norton App Lock", "vendor": "Symantec Corporation", "versions": [{"status": "affected", "version": "Prior to version 1.3.0.329"}]}], "datePublic": "2018-06-13T00:00:00", "descriptions": [{"lang": "en", "value": "Norton App Lock prior to version 1.3.0.329 can be susceptible to a bypass exploit. In this type of circumstance, the exploit can allow the user to circumvent the app to prevent it from locking the device, thereby allowing the individual to gain device access."}], "problemTypes": [{"descriptions": [{"description": "App Lock Bypass", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-06-14T09:57:01", "orgId": "80d3bcb6-88de-48c2-a47e-aebf795f19b5", "shortName": "symantec"}, "references": [{"name": "104414", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/104414"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://support.symantec.com/en_US/article.SYMSA1453.html"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "secure@symantec.com", "DATE_PUBLIC": "2018-06-13T00:00:00", "ID": "CVE-2018-5242", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Norton App Lock", "version": {"version_data": [{"version_value": "Prior to version 1.3.0.329"}]}}]}, "vendor_name": "Symantec Corporation"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Norton App Lock prior to version 1.3.0.329 can be susceptible to a bypass exploit. In this type of circumstance, the exploit can allow the user to circumvent the app to prevent it from locking the device, thereby allowing the individual to gain device access."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "App Lock Bypass"}]}]}, "references": {"reference_data": [{"name": "104414", "refsource": "BID", "url": "http://www.securityfocus.com/bid/104414"}, {"name": "https://support.symantec.com/en_US/article.SYMSA1453.html", "refsource": "CONFIRM", "url": "https://support.symantec.com/en_US/article.SYMSA1453.html"}]}}}}, "cveMetadata": {"assignerOrgId": "80d3bcb6-88de-48c2-a47e-aebf795f19b5", "assignerShortName": "symantec", "cveId": "CVE-2018-5242", "datePublished": "2018-06-13T00:00:00", "dateReserved": "2018-01-05T00:00:00", "dateUpdated": "2018-06-14T09:57:01", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:symantec:norton_app_lock:*:*:*:*:*:*:*:*", "matchCriteriaId": "5C3E2E9B-6101-4F39-9907-8EE0D73B6BEB", "versionEndExcluding": "1.3.0.329", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Norton App Lock prior to version 1.3.0.329 can be susceptible to a bypass exploit. In this type of circumstance, the exploit can allow the user to circumvent the app to prevent it from locking the device, thereby allowing the individual to gain device access."}, {"lang": "es", "value": "Norton App Lock en versiones anteriores a la 1.3.0.329 puede ser susceptible a un exploit de omisi\u00f3n. En este tipo de circunstancia, el exploit puede permitir que el usuario omita la aplicaci\u00f3n para evitar que bloquee el dispositivo, permitiendo que esa persona obtenga acceso al dispositivo."}], "id": "CVE-2018-5242", "lastModified": "2019-10-03T00:03:26.223", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 7.2, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "PHYSICAL", "availabilityImpact": "HIGH", "baseScore": 6.2, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 0.3, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2018-06-13T16:29:01.703", "references": [{"source": "secure@symantec.com", "tags": ["VDB Entry", "Third Party Advisory"], "url": "http://www.securityfocus.com/bid/104414"}, {"source": "secure@symantec.com", "tags": ["Mitigation", "Vendor Advisory"], "url": "https://support.symantec.com/en_US/article.SYMSA1453.html"}], "sourceIdentifier": "secure@symantec.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}