NowSecure dynamic analysis: Data Storage in Platform Preferences

lcimeni / youtube

0 stars 0 forks source link

NowSecure dynamic analysis: Data Storage in Platform Preferences #128

Open lcimeni opened 3 years ago

lcimeni commented 3 years ago

Finding Description

The application invokes platform-provided mechanisms for storing configuration data.

Steps to Reproduce

Detects use of platform-provided preferences storage on iOS.

Risk and Regulatory Information

Severity: info CVSS: 10

NIAP: FMT_MEC_EXT.1.1
CCPA: Risks violating CCPA: exfiltration, theft, or disclosure of PII

Application

Platform: ios
Package: com.grubhub.delivery

See more detail in the NowSecure Report

lcimeni commented 3 years ago

Update: The risk severity (CVSS score) of this finding has been modified from 10 to 0 by Lorenz Cimeni.

Powered by NowSecure Platform

lcimeni commented 3 years ago

Update: This finding has been marked as ‘Pass’ by Lorenz Cimeni, so no additional action required.

Powered by NowSecure Platform

lcimeni commented 3 years ago

Update: This finding has been permanently hidden by Lorenz Cimeni, so no additional action required.

Powered by NowSecure Platform

lcimeni commented 3 years ago

Update: This finding is no longer marked as hidden. Additional action is required. Change made by: Lorenz Cimeni.

Powered by NowSecure Platform

lcimeni commented 3 years ago

Update: This finding is no longer marked as 'Pass'. Additional action is required. Change made by: Lorenz Cimeni.

Powered by NowSecure Platform