lcimeni / cookie

0 stars 0 forks source link

NowSecure static analysis: Targeting SDK Under 29 Will Block App Store Release #275

Open lcimeni opened 3 years ago

lcimeni commented 3 years ago

Finding Description

The application was found to be using a target SDK less than 29. Beginning August 2021, targetting an SDK level of 29 or higher will be a requirement for publishing to the Google Play Store.

Evaluation Criteria

Ensure that activating this component independent of the main application/UI does not expose sensitive information of functionality.

Business Impact

The app is using a setting which will prevent its release to the Google Play Store.

Remediation Resources

Change your targetted SDK level to 29 or higher. If your Gradle file contains manifest entries, you can confirm or change the current value of targetSdkVersion in your app's Gradle file, as described in Configure your build. Alternatively, you can use the android:targetSdkVersion attribute in the manifest file, as described in the documentation for the manifest element.

Risk and Regulatory Information

Severity: high CVSS: 7.5

Application

See more detail in the NowSecure Report