Medium severity · published Jan 8, 2020
CVE-2016-6587
An Information Disclosure vulnerability exists in the mid.dat file stored on the SD card in Symantec Norton Mobile Security for Android before 3.16, which could let a local…
5.5
CVSS
0.5%
EPSS
No
On KEV
Description
An Information Disclosure vulnerability exists in the mid.dat file stored on the SD card in Symantec Norton Mobile Security for Android before 3.16, which could let a local malicious user obtain sensitive information.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 39% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NM
Norton Mobile Security · Symantec
before 3.16 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-6587
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-6587
Third Party Advisory
http://www.securityfocus.com/bid/93858
Third Party Advisory
http://www.securitytracker.com/id/1037225
Third Party Advisory
https://support.symantec.com/us/en/article.symsa1384.html
Permissions Required
https://vuldb.com/?id.93273
More from Norton Mobile Security
5.3
CVE-2016-6585
A Denial of Service vulnerability exists in Symantec Norton Mobile Security for Android prior to 3.16, which could let a remote malicious user conduct a man-in-the-middle attack…
3.7
CVE-2016-6586
A security bypass vulnerability exists in Symantec Norton Mobile Security for Android before 3.16, which could let a malicious user conduct a man-in-the-middle via specially…