Bug/vulnerability to bypass Norton AppLock

Archive
1

I seem to have found a simple way to bypass AppLocker. I emailed and chatted with Norton support, and the best they could do was tell me to post here, in the hopes that a developer will see it...Here's the email I sent:

I just installed App Lock on a number of devices for employee use, (Samsung Galaxy Tab Active) and I realized that AppLock can very easily be bypassed: One simply has to open the AppLock app, press the Recents button, open the “Task Manager” and “End” Norton AppLock. This removes all AppLock functionality. Futhermore, if you run AppLock after closing it in this matter, you are presented with the “Enable Accessibility…” screen that is displayed when running the app for the first time, requiring you to enable the AppLock service again.

This is a huge vulnerability which makes the app essentially worthless. Any Symantec developers out there who can check this out? Thanks.

2

Accidental double post, sorry about that. This thread is continued here: https://community.norton.com/en/forums/bugvulnerability-norton-applock

3

By default, the App Lock app should lock itself. So the only way for the users to open the app is with the pass code. If a user has the pass code, it is assumed they have responsibility for the security of the device.

An added suggestion...To ensure the user cannot reset the device, thus bypassing all security, you can set App Lock to protect the Android Settings.