NowSecure dynamic analysis: Keychain

[lcimeni]

Finding Description

Keychain interaction was observed during dynamic analysis. iOS provides the keychain for secure data storage. However, in several scenarios, the keychain can be compromised and subsequently decrypted.

Steps to Reproduce

This section highlights any activity where the app calls the iOS Keychain. The table in this section displays when keychain items are created, deleted, or queried in some way.

Risk and Regulatory Information

Severity: info

• CCPA: Risks violating CCPA: exfiltration, theft, or disclosure of PII

Application

• Platform: ios
• Package: net.appox.github.GithubProjects

See more detail in the NowSecure Report

[lcimeni]

Update: This finding has been permanently hidden by Lorenz Cimeni, so no additional action required.

Powered by NowSecure Platform

[lcimeni]

Update: This finding has been marked as ‘Pass’ by Lorenz Cimeni, so no additional action required.

Powered by NowSecure Platform