CVE-2017-15528: Medium severity Norton Install Norton Security Macos vulnerability
Prior to v 7.6, the Install Norton Security (INS) product can be susceptible to a certificate spoofing vulnerability, which is a type of attack whereby a maliciously procured certificate binds the public key of an attacker to the domain name of the target.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2017-15528?
CVE-2017-15528 is a vulnerability in the Install Norton Security (INS) product that allows for certificate spoofing.
How does the certificate spoofing vulnerability work?
The certificate spoofing vulnerability in the Install Norton Security (INS) product occurs when a maliciously procured certificate binds the public key of an attacker to the domain name of the target.
What is the severity of CVE-2017-15528?
The severity of CVE-2017-15528 is medium with a CVSS score of 3.7.
Which version of the Install Norton Security (INS) product is affected by CVE-2017-15528?
Prior to version 7.6, the Install Norton Security (INS) product is affected by CVE-2017-15528.
How can I fix the certificate spoofing vulnerability in the Install Norton Security (INS) product?
To fix the certificate spoofing vulnerability, it is recommended to upgrade to version 7.6 or higher of the Install Norton Security (INS) product.