CVE-2018-18363 : Security Advisory and Response

Norton App Lock prior to version 1.4.0.445 has a vulnerability that allows bypassing the app's security measures, potentially granting unauthorized access to the device.

Understanding CVE-2018-18363

This CVE identifies a security flaw in older versions of Norton App Lock that could be exploited to override the app's functionality.

What is CVE-2018-18363?

The vulnerability in Norton App Lock versions prior to 1.4.0.445 enables attackers to bypass the app's security measures, compromising the device's lock functionality.

The Impact of CVE-2018-18363

Exploiting this vulnerability can lead to unauthorized individuals gaining access to the device by circumventing the app's lock feature.

Technical Details of CVE-2018-18363

Norton App Lock's security vulnerability is detailed below:

Vulnerability Description

The flaw allows attackers to bypass the app's security measures.

Affected Systems and Versions

Product: Norton App Lock
Vendor: Symantec Corporation
Vulnerable Version: Prior to 1.4.0.445

Exploitation Mechanism

Attackers exploit the vulnerability to prevent the app from locking the device, granting unauthorized access.

Mitigation and Prevention

Taking immediate steps and implementing long-term security practices are crucial to mitigate the risks associated with CVE-2018-18363.

Immediate Steps to Take

Update Norton App Lock to version 1.4.0.445 or newer.
Monitor device access closely for any unauthorized activity.

Long-Term Security Practices

Regularly update all software and applications on the device.
Use strong, unique passwords and enable two-factor authentication where possible.

Patching and Updates

Symantec Corporation may release patches or updates to address the vulnerability. Stay informed and apply patches promptly.