CVE-2018-18365
UnknownEPSS 1.25%
Last modified
CVE-2018-18365 is a vulnerability of currently unknown severity. Norton Password Manager may be susceptible to an address spoofing issue. This type of issue may allow an attacker to disguise their origin IP address in order to obfuscate the source of network traffic.. EPSS estimates a 1.25% chance of exploitation in the next 30 days.
Description
Norton Password Manager may be susceptible to an address spoofing issue. This type of issue may allow an attacker to disguise their origin IP address in order to obfuscate the source of network traffic.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Symantec | Norton Password Manager | < 6.2.0.1078 |
| Symantec | Norton Password Manager | < 6.2.309 |
References
- https://support.symantec.com/en_US/article.SYMSA1475.htmlVendor Advisory
- https://support.symantec.com/en_US/article.SYMSA1475.htmlVendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-18365?
Norton Password Manager may be susceptible to an address spoofing issue. This type of issue may allow an attacker to disguise their origin IP address in order to obfuscate the source of network traffic.
How severe is CVE-2018-18365?
Severity scoring for CVE-2018-18365 is pending analysis. The EPSS model estimates a 1.25% probability of exploitation in the next 30 days.
How do I fix CVE-2018-18365?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2018
- CVE-2018-18359Incorrect handling of Reflect.construct in V8 in Google Chro…
- CVE-2018-1836IBM WebSphere MQ 9.0.2, 9.0.3, 9.0.4, 9.0.5, 9.1.0.0, and 9.…5.4
- CVE-2018-18361An issue was discovered in nc-cms through 2017-03-10. index.…
- CVE-2018-18362Norton Password Manager for Android (formerly Norton Identit…
- CVE-2018-18363Norton App Lock prior to 1.4.0.445 can be susceptible to a b…
- CVE-2018-18364Symantec Ghost Solution Suite (GSS) versions prior to 3.3 RU…
- CVE-2018-18366Symantec Norton Security prior to 22.16.3, SEP (Windows clie…
- CVE-2018-18367Symantec Endpoint Protection Manager (SEPM) prior to and inc…
- CVE-2018-18368Symantec Endpoint Protection Manager (SEPM), prior to 14.2 R…7.8
- CVE-2018-18369Norton Security (Windows client) prior to 22.16.3 and SEP SB…
- CVE-2018-18370The ASG/ProxySG FTP proxy WebFTP mode allows intercepting FT…
- CVE-2018-18371The ASG/ProxySG FTP proxy WebFTP mode allows intercepting FT…
Are you affected by CVE-2018-18365?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST