CVE-2017-15528
Low
Description
Prior to v 7.6, the Install Norton Security (INS) product can be susceptible to a certificate spoofing vulnerability, which is a type of attack whereby a maliciously procured certificate binds the public key of an attacker to the domain name of the target.
SeverityLow
CVSS3.7
Exploit probability—
ProductInstall Norton Security
PublishedNov 22, 2017
First seenNov 22, 2017
How to fix
Update
- norton install_norton_security7.6 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| norton install_norton_security | v < 7.6 | 7.6 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.