search

lcimeni / disney

0 stars 0 forks source link

NowSecure static analysis: Targeting SDK Under 30 Will Block App Store Release #84

Open lcimeni opened 3 years ago

lcimeni commented 3 years ago

Finding Description

The application was found to be using a target SDK less than 30. Beginning August 2021, targetting an SDK level of 30 or higher will be a requirement for publishing to the Google Play Store. Evaluation Criteria: Ensure that activating this component independent of the main application/UI does not expose sensitive information of functionality.

Business Impact

The app is using a setting which will prevent its release to the Google Play Store.

Remediation Resources

Change your targetted SDK level to 30 or higher. If your Gradle file contains manifest entries, you can confirm or change the current value of targetSdkVersion in your app's Gradle file, as described in [https://developer.android.com/studio/build#module-level](Configure your build). Alternatively, you can use the android:targetSdkVersion attribute in the manifest file, as described in the documentation for the [https://developer.android.com/guide/topics/manifest/uses-sdk-element]( manifest element).

Risk and Regulatory Information

Severity: high CVSS: 7.5

Application

See more detail in the NowSecure Report

lcimeni commented 3 years ago

Update: The fix for this finding has been verified by NowSecure.

Powered by NowSecure Platform