Vulnerability Description
A security bypass vulnerability exists in Symantec Norton Mobile Security for Android before 3.16, which could let a malicious user conduct a man-in-the-middle via specially crafted JavaScript to add arbitrary URLs to the URL whitelist.
CVSS Score
LOW
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Symantec | Norton Mobile Security | < 3.16 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/93901Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1037225Third Party AdvisoryVDB Entry
- https://support.symantec.com/us/en/article.symsa1384.htmlVendor Advisory
- http://www.securityfocus.com/bid/93901Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1037225Third Party AdvisoryVDB Entry
- https://support.symantec.com/us/en/article.symsa1384.htmlVendor Advisory
FAQ
What is CVE-2016-6586?
CVE-2016-6586 is a vulnerability with a CVSS score of 3.7 (LOW). A security bypass vulnerability exists in Symantec Norton Mobile Security for Android before 3.16, which could let a malicious user conduct a man-in-the-middle via specially crafted JavaScript to add ...
How severe is CVE-2016-6586?
CVE-2016-6586 has been rated LOW with a CVSS base score of 3.7/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2016-6586?
Check the references section above for vendor advisories and patch information. Affected products include: Symantec Norton Mobile Security.