NowSecure dynamic analysis: App Can Receive Security Updates Via the Play Store

lcimeni commented 3 years ago

Finding Description

The application is not published on the Play Store suggesting that security updates are not applied automatically.

Steps to Reproduce

This check determines if the app is available on the Google Play Store and can receive automatic security updates.

Business Impact

Apps that are not updated regularly may be susceptible to known exploits that can compromise the security and privacy of user data.

Remediation Resources

Apps published on the Play Store have the ability to safely receive trusted security updates and also remind users to update on a regular basis. Apps that have not yet been published should still serve security updates whenever available through a trusted service.

Risk and Regulatory Information

Severity: info

ioXt: AA3, AA4

Application

Platform: android
Package: fuzion24.dynamictestapp

See more detail in the NowSecure Report

lcimeni commented 3 years ago

Update: The risk severity (CVSS score) of this finding has been modified from 0 to 7.77 by Lorenz Cimeni.

Powered by NowSecure Platform

lcimeni commented 3 years ago

Update: The risk severity (CVSS score) of this finding has been modified from 7.77 to 7.7777 by Lorenz Cimeni.

Powered by NowSecure Platform

lcimeni commented 3 years ago

Update: This finding has been marked as ‘Pass’ by Lorenz Cimeni, so no additional action required.

Powered by NowSecure Platform

lcimeni commented 3 years ago

Update: This finding has been permanently hidden by Lorenz Cimeni, so no additional action required.

Powered by NowSecure Platform

lcimeni / youtube