0% found this document useful (0 votes)
8 views10 pages

Sensitive Data in Code Files

Uploaded by

masszwaker
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
8 views10 pages

Sensitive Data in Code Files

Uploaded by

masszwaker
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd

NO ISSUE SEVERITY STANDARDS FILES

1 Files may warning CWE: Show Files Suppress


contain CWE-312: coil/request/[Link] android_h
hardcoded Cleartext coil/request/[Link] [Link]
sensitive Storage of coil/request/[Link] Suppress
information like Sensitive coil/util/[Link] android_h
usernames, Information com/amplitude/android/migration/ [Link]
passwords, OWASP Top [Link] these file
keys etc. 10: M9: com/amplitude/id/[Link]
Reverse com/amplitude/id/[Link]
Engineering com/azure/core/http/[Link]
OWASP com/azure/core/http/netty/implementation/
MASVS: [Link]
MSTG- com/azure/core/http/policy/
STORAGE-14 [Link]
com/azure/core/http/policy/[Link]
com/azure/core/http/policy/[Link]
com/azure/core/implementation/http/policy/
[Link]
com/azure/core/implementation/jackson/
[Link]
com/azure/core/implementation/jackson/
[Link]
com/azure/core/implementation/logging/[Link]
com/azure/core/util/[Link]
com/azure/core/util/logging/[Link]
com/azure/core/util/tracing/[Link]
com/azure/core/util/tracing/[Link]
com/azure/storage/common/
[Link]
com/azure/storage/common/implementation/[Link]
com/azure/storage/common/implementation/
[Link]
com/azure/storage/internal/avro/implementation/
[Link]
com/bumptech/glide/load/[Link]
com/bumptech/glide/load/engine/[Link]
com/bumptech/glide/load/engine/[Link]
com/bumptech/glide/load/engine/[Link]
com/ctc/wstx/shaded/msv_core/reader/trex/ng/
[Link]
com/ctc/wstx/shaded/msv_core/reader/xmlschema/
[Link]
com/ctc/wstx/shaded/msv_core/verifier/identity/
[Link]
com/kyn/[Link]
com/kyn/domain/model/response/[Link]
com/kyn/domain/model/response/[Link]
com/kyn/domain/model/response/[Link]
com/kyn/domain/model/response/
[Link]
com/kyn/domain/model/response/[Link]
com/kyn/model/home/[Link]
com/kyn/model/home/[Link]
com/kyn/model/home/[Link]
com/kyn/model/home/[Link]
com/kyn/models/[Link]
com/kyn/models/[Link]
com/kyn/models/[Link]
com/kyn/models/[Link]
com/kyn/models/[Link]
com/kyn/models/[Link]
com/kyn/models/[Link]
com/kyn/models/[Link]
NO ISSUE SEVERITY STANDARDS FILES
com/kyn/models/[Link]
com/kyn/models/[Link]
com/kyn/models/[Link]
com/kyn/models/[Link]
com/kyn/models/analytics/[Link]
com/kyn/models/analytics/[Link]
com/kyn/models/events/[Link]
com/kyn/models/post/create/[Link]
com/kyn/models/post/create/[Link]
com/kyn/models/profile/[Link]
com/kyn/models/profile/[Link]
com/kyn/models/profile/[Link]
com/kyn/models/profile/[Link]
com/kyn/models/profile/[Link]
com/kyn/models/profile/[Link]
com/kyn/models/profile/[Link]
com/kyn/models/register/[Link]
com/kyn/models/register/[Link]
com/kyn/models/report/[Link]
com/kyn/models/report/[Link]
com/kyn/models/video/videos/[Link]
com/kyn/sealed/[Link]
com/kyn/sealed/[Link]
com/kyn/sealed/[Link]
com/kyn/sealed/[Link]
com/kyn/ui/Follower/[Link]
com/kyn/ui/comments/model/[Link]
com/kyn/ui/components/models/[Link]
com/kyn/ui/components/models/[Link]
com/kyn/ui/home/[Link]
com/kyn/ui/home/[Link]
com/kyn/ui/klips/[Link]
com/kyn/ui/like/[Link]
com/kyn/ui/main/presentation/screen/
[Link]
com/kyn/ui/notices/presentation/
[Link]
com/kyn/ui/postdetails/[Link]
com/kyn/ui/profile/presentation/[Link]
com/kyn/ui/profile/presentation/
[Link]
com/kyn/ui/registration/models/[Link]
com/kyn/ui/search/model/[Link]
com/kyn/ui/search/presentation/screen/
[Link]
com/kyn/ui/video/[Link]
com/kyn/ui/video/view_all_videos/presentation/
[Link]
com/kyn/utils/[Link]
com/kyn/utils/[Link]
com/kyn/utils/[Link]
com/microsoft/azure/storage/[Link]
com/microsoft/azure/storage/[Link]
com/microsoft/azure/storage/[Link]
com/microsoft/azure/storage/core/[Link]
com/microsoft/azure/storage/table/[Link]
com/moengage/core/config/[Link]
com/moengage/core/internal/[Link]
com/moengage/core/internal/data/reports/
[Link]
com/moengage/core/internal/data/reports/
[Link]
com/moengage/core/internal/model/logging/[Link]
NO ISSUE SEVERITY STANDARDS FILES
com/moengage/core/internal/rest/[Link]
com/moengage/core/internal/rest/[Link]
com/moengage/core/internal/rest/interceptor/
[Link]
com/moengage/core/internal/storage/database/contract/
[Link]
com/moengage/core/internal/storage/preference/
[Link]
com/moengage/core/internal/utils/[Link]
com/moengage/inapp/internal/repository/remote/
[Link]
com/moengage/inapp/internal/repository/remote/
[Link]
com/moengage/richnotification/internal/
[Link]
com/moengage/trigger/evaluator/internal/repository/local/
[Link]
com/mux/stats/sdk/core/model/[Link]
com/mux/stats/sdk/core/model/[Link]
io/grpc/[Link]
io/grpc/internal/[Link]
io/grpc/internal/[Link]
io/grpc/internal/[Link]
io/netty/handler/codec/http/[Link]
io/netty/handler/proxy/[Link]
io/netty/handler/proxy/[Link]
io/netty/handler/ssl/[Link]
io/netty/handler/ssl/[Link]
io/netty/util/[Link]
reactor/core/scheduler/[Link]
reactor/netty/transport/[Link]
2 The App logs info CWE: Show Files Suppress
information. CWE-532: com/amplitude/common/android/[Link] android_l
Sensitive Insertion of com/amplitude/common/jvm/[Link] [Link]
information Sensitive com/appsflyer/internal/[Link] Suppress
should never Information com/appsflyer/internal/[Link] android_l
be logged. into Log File com/appsflyer/internal/[Link] [Link]
OWASP com/appsflyer/internal/[Link] these file
MASVS: com/appsflyer/internal/[Link]
MSTG- com/appsflyer/share/[Link]
STORAGE-3 com/azure/core/implementation/logging/[Link]
com/bumptech/glide/[Link]
com/bumptech/glide/disklrucache/[Link]
com/bumptech/glide/gifdecoder/[Link]
com/bumptech/glide/gifdecoder/[Link]
com/bumptech/glide/load/data/[Link]
com/bumptech/glide/load/data/[Link]
com/bumptech/glide/load/data/[Link]
com/bumptech/glide/load/data/mediastore/
[Link]
com/bumptech/glide/load/data/mediastore/
[Link]
com/bumptech/glide/load/engine/[Link]
com/bumptech/glide/load/engine/[Link]
com/bumptech/glide/load/engine/[Link]
com/bumptech/glide/load/engine/[Link]
com/bumptech/glide/load/engine/[Link]
com/bumptech/glide/load/engine/bitmap_recycle/
[Link]
com/bumptech/glide/load/engine/bitmap_recycle/
[Link]
com/bumptech/glide/load/engine/cache/
NO ISSUE SEVERITY STANDARDS FILES
[Link]
com/bumptech/glide/load/engine/cache/
[Link]
com/bumptech/glide/load/engine/executor/
[Link]
com/bumptech/glide/load/engine/executor/
[Link]
com/bumptech/glide/load/engine/prefill/
[Link]
com/bumptech/glide/load/model/[Link]
com/bumptech/glide/load/model/[Link]
com/bumptech/glide/load/model/[Link]
com/bumptech/glide/load/model/[Link]
com/bumptech/glide/load/model/[Link]
com/bumptech/glide/load/model/[Link]
com/bumptech/glide/load/resource/
[Link]
com/bumptech/glide/load/resource/bitmap/
[Link]
com/bumptech/glide/load/resource/bitmap/
[Link]
com/bumptech/glide/load/resource/bitmap/
[Link]
com/bumptech/glide/load/resource/bitmap/
[Link]
com/bumptech/glide/load/resource/bitmap/
[Link]
com/bumptech/glide/load/resource/bitmap/
[Link]
com/bumptech/glide/load/resource/bitmap/
[Link]
com/bumptech/glide/load/resource/bitmap/
[Link]
com/bumptech/glide/load/resource/gif/
[Link]
com/bumptech/glide/load/resource/gif/
[Link]
com/bumptech/glide/load/resource/gif/
[Link]
com/bumptech/glide/manager/
[Link]
com/bumptech/glide/manager/[Link]
com/bumptech/glide/manager/
[Link]
com/bumptech/glide/module/[Link]
com/bumptech/glide/request/[Link]
com/bumptech/glide/request/target/[Link]
com/bumptech/glide/request/target/[Link]
com/bumptech/glide/signature/
[Link]
com/bumptech/glide/util/[Link]
com/bumptech/glide/util/pool/[Link]
com/ctc/wstx/compat/[Link]
com/ctc/wstx/shaded/msv_core/datatype/regexp/[Link]
com/ctc/wstx/shaded/msv_core/datatype/regexp/
[Link]
com/ctc/wstx/shaded/msv_core/driver/textui/
[Link]
com/ctc/wstx/shaded/msv_core/reader/xmlschema/
[Link]
com/ctc/wstx/shaded/msv_core/scanner/dtd/[Link]
com/ctc/wstx/shaded/msv_core/verifier/[Link]
com/ctc/wstx/shaded/msv_core/verifier/identity/
NO ISSUE SEVERITY STANDARDS FILES
[Link]
com/ctc/wstx/shaded/msv_core/verifier/identity/
[Link]
com/ctc/wstx/shaded/msv_core/verifier/identity/
[Link]
com/ctc/wstx/shaded/msv_core/verifier/identity/
[Link]
com/ctc/wstx/shaded/msv_core/verifier/regexp/
[Link]
com/ctc/wstx/shaded/msv_core/verifier/regexp/
[Link]
com/ctc/wstx/shaded/msv_core/verifier/regexp/xmlschema/
[Link]
com/ctc/wstx/shaded/msv_core/writer/relaxng/
[Link]
com/ctc/wstx/sw/[Link]
com/kyn/
EventAnalytics$triggerCustomMixPanelEvents$[Link]
com/kyn/
EventAnalytics$triggerCustomMoengageEvents$[Link]
com/kyn/EventAnalytics$updateAppFlyerEvent$[Link]
com/kyn/[Link]
com/kyn/MainActivity$navigateTo$[Link]
com/kyn/[Link]
com/kyn/adapters/[Link]
com/kyn/adapters/
ReportAdapter$loadMoreDataWhenPageEnds$[Link]
com/kyn/adapters/[Link]
com/kyn/auth/[Link]
com/kyn/custom/views/[Link]
com/kyn/data/SafeApiCallKt$safeApiCall$[Link]
com/kyn/data/repository/
LiveStreamRepositoryImpl$fetchUpcomingLiveStreams$[Link]
com/kyn/data/repository/
ProfileRepository$getPostsByUserId$[Link]
com/kyn/data/repository/
ProfileRepository$getScheduledKlips$[Link]
com/kyn/helpers/
AzureBlobStorageManager$uploadVideo$[Link]
com/kyn/helpers/[Link]
com/kyn/helpers/KynApplication$appsflyerDeeplink$[Link]
com/kyn/helpers/[Link]
com/kyn/interceptor/[Link]
com/kyn/models/home/[Link]
com/kyn/network/[Link]
com/kyn/network/[Link]
com/kyn/network/[Link]
com/kyn/network/interceptor/
[Link]
com/kyn/network/interceptor/
[Link]
com/kyn/network/interceptor/[Link]
com/kyn/notification/[Link]
com/kyn/notification/[Link]
com/kyn/notification/[Link]
com/kyn/notification/[Link]
com/kyn/notification/[Link]
com/kyn/notification/[Link]
com/kyn/ui/Follower/
FollowerViewModel$getFollowers$[Link]
com/kyn/ui/Follower/FollowerViewModel$getFollowing$[Link]
com/kyn/ui/activity/[Link]
com/kyn/ui/campaign/[Link]
NO ISSUE SEVERITY STANDARDS FILES
com/kyn/ui/campaign/[Link]
com/kyn/ui/campaign/
HashTagPageViewModel$onShareAction$[Link]
com/kyn/ui/campaign/[Link]
com/kyn/ui/campaign/
HashtagPublish$initViewModelKlipsPublish$[Link]
com/kyn/ui/campaign/
HashtagPublish$initViewModelPostPublish$[Link]
com/kyn/ui/campaign/[Link]
com/kyn/ui/campaign/[Link]
com/kyn/ui/campaign/[Link]
com/kyn/ui/categoryevents/[Link]
com/kyn/ui/components/models/[Link]
com/kyn/ui/components/models/[Link]
com/kyn/ui/eventdetails/[Link]
com/kyn/ui/fragments/[Link]
com/kyn/ui/home/
BottomSheetDialogReport$initViewModel$[Link]
com/kyn/ui/home/
HomePageFragmentKt$TrackVisibility$[Link]
com/kyn/ui/home/[Link]
com/kyn/ui/home/HomePageViewModel$verifyOtp$[Link]
com/kyn/ui/home/[Link]
com/kyn/ui/home/[Link]
com/kyn/ui/home/
UsernameUpdateViewModel$updateDefaultLocation$[Link]
com/kyn/ui/home/
UsernameUpdateViewModel$updateUserDetails$[Link]
com/kyn/ui/home/[Link]
com/kyn/ui/interest/[Link]
com/kyn/ui/interest/[Link]
com/kyn/ui/interest/[Link]
com/kyn/ui/klips/KlipListViewModel$onShareAction$[Link]
com/kyn/ui/klips/KlipListViewModel$preCacheVideo$[Link]
com/kyn/ui/klips/[Link]
com/kyn/ui/location/
AddLocationScreen$initViewModelLocation$[Link]
com/kyn/ui/location/[Link]
com/kyn/ui/location/[Link]
com/kyn/ui/location/presentation/viewmodel/
LocationViewModel$upsertGuestUserLocation$[Link]
com/kyn/ui/location/presentation/viewmodel/
LocationViewModel$upsertRegisteredUserLocation$[Link]
com/kyn/ui/login/[Link]
com/kyn/ui/login/LoginViewModel$createFCMToken$[Link]
com/kyn/ui/login/LoginViewModel$createLogin$[Link]
com/kyn/ui/login/LoginViewModel$fetchAdvertisingId$[Link]
com/kyn/ui/login/LoginViewModel$verifyOtp$[Link]
com/kyn/ui/login/[Link]
com/kyn/ui/notices/viewmodel/
BlogDetailViewModel$onShareAction$[Link]
com/kyn/ui/notices/viewmodel/[Link]
com/kyn/ui/postdetails/
PostDetailsViewModel$onShareAction$[Link]
com/kyn/ui/postdetails/[Link]
com/kyn/ui/profile/[Link]
com/kyn/ui/profile/
EditProfileActivity$initUsernameSuggestionsViewModel$[Link]
com/kyn/ui/profile/[Link]
com/kyn/ui/profile/[Link]
com/kyn/ui/profile/[Link]
com/kyn/ui/profile/[Link]
com/kyn/ui/profile/[Link]
NO ISSUE SEVERITY STANDARDS FILES
com/kyn/ui/profile/presentation/
ProfileFragment$observeNavigation$[Link]
com/kyn/ui/profile/viewmodel/
ProfileViewModel$onShareAction$[Link]
com/kyn/ui/profile/viewmodel/[Link]
com/kyn/ui/register/[Link]
com/kyn/ui/register/[Link]
com/kyn/ui/search/viewmodel/
SearchViewModel$fetchSearchData$[Link]
com/kyn/ui/search/viewmodel/
SearchViewModel$onShareAction$[Link]
com/kyn/ui/search/viewmodel/[Link]
com/kyn/ui/settings/[Link]
com/kyn/ui/settings/[Link]
com/kyn/ui/settings/[Link]
com/kyn/ui/settings/viewmodel/
SettingsViewModel$createFCMRegister$[Link]
com/kyn/ui/settings/viewmodel/
SettingsViewModel$initViewModelFcmRegister$[Link]
com/kyn/ui/settings/viewmodel/[Link]
com/kyn/ui/video/[Link]
com/kyn/ui/video/[Link]
com/kyn/ui/video/kyn_live/[Link]
com/kyn/ui/video/kyn_live/viewmodel/
[Link]
com/kyn/ui/video/videos/[Link]
com/kyn/ui/video/videos/viewmodel/
VideoListViewModel$fetchVideosByCategories$[Link]
com/kyn/ui/video/videos/viewmodel/
VideoListViewModel$onShareAction$[Link]
com/kyn/ui/video/videos/viewmodel/
[Link]
com/kyn/ui/video/view_all_videos/viewmodel/
ViewAllVideosViewModel$onShareAction$[Link]
com/kyn/ui/video/view_all_videos/viewmodel/
[Link]
com/kyn/utils/[Link]
com/kyn/utils/[Link]
com/kyn/utils/[Link]
com/kyn/viewmodel/[Link]
com/kyn/viewmodel/
MainViewModel$fetchAdvertisingId$[Link]
com/kyn/viewmodel/
MainViewModel$fetchDefaultGuestUserToken$[Link]
com/kyn/viewmodel/[Link]
com/microsoft/azure/storage/core/[Link]
com/miui/referrer/commons/[Link]
com/mixpanel/android/mpmetrics/[Link]
com/mixpanel/android/mpmetrics/[Link]
com/mixpanel/android/mpmetrics/[Link]
com/mixpanel/android/mpmetrics/[Link]
com/mixpanel/android/mpmetrics/[Link]
com/mixpanel/android/mpmetrics/[Link]
com/mixpanel/android/mpmetrics/[Link]
com/mixpanel/android/mpmetrics/[Link]
com/mixpanel/android/mpmetrics/[Link]
com/mixpanel/android/util/[Link]
com/mixpanel/android/util/[Link]
com/moengage/core/internal/logger/[Link]
com/moengage/datatype/[Link]
com/mux/stats/sdk/muxstats/[Link]
defpackage/[Link]
io/grpc/android/[Link]
NO ISSUE SEVERITY STANDARDS FILES
io/grpc/okhttp/internal/[Link]
io/netty/util/[Link]
io/netty/util/internal/logging/[Link]
junit/runner/[Link]
junit/runner/[Link]
junit/textui/[Link]
org/slf4j/helpers/[Link]
reactor/netty/internal/shaded/reactor/pool/
[Link]
3 This App uses secure OWASP Show Files Suppress
SSL certificate MASVS: com/kyn/di/[Link] android_s
pinning to MSTG- com/kyn/network/[Link] [Link]
detect or NETWORK-4 io/grpc/okhttp/[Link] Suppress
prevent MITM io/grpc/okhttp/[Link] android_s
attacks in io/grpc/util/[Link] [Link]
secure io/netty/handler/ssl/[Link] these file
communication io/netty/handler/ssl/[Link]
channel. io/netty/handler/ssl/
[Link]
io/netty/handler/ssl/
[Link]
io/netty/handler/ssl/[Link]
io/netty/handler/ssl/util/[Link]
io/netty/handler/ssl/util/
[Link]
4 Debug high CWE: com/kyn/config/[Link] Suppress
configuration CWE-919: android_a
enabled. Weaknesses in [Link]
Production in Mobile Suppress
builds must not Applications android_a
be debuggable. OWASP Top in [Link]
10: M1: from thes
Improper
Platform
Usage
OWASP
MASVS:
MSTG-
RESILIENCE-2
5 The App uses warning CWE: Show Files Suppress
an insecure CWE-330: Use com/amplitude/core/utilities/[Link] android_i
Random of com/appsflyer/internal/[Link] [Link]
Number Insufficiently com/appsflyer/internal/[Link] Suppress
Generator. Random com/microsoft/azure/storage/[Link] android_i
Values com/mux/stats/sdk/core/util/[Link] [Link]
OWASP Top io/grpc/internal/[Link] these file
10: M5: io/grpc/internal/[Link]
Insufficient io/grpc/internal/[Link]
Cryptography io/grpc/internal/[Link]
OWASP io/grpc/okhttp/[Link]
MASVS: io/grpc/util/[Link]
MSTG- io/grpc/util/[Link]
CRYPTO-6 io/netty/handler/ssl/util/[Link]
io/netty/util/internal/[Link]
io/netty/util/internal/[Link]
org/junit/runner/manipulation/[Link]
reactor/netty/internal/shaded/reactor/pool/introspection/
[Link]
6 App creates warning CWE: Show Files Suppress
temp file. CWE-276: io/netty/handler/codec/http/multipart/ android_t
Sensitive Incorrect [Link] [Link]
NO ISSUE SEVERITY STANDARDS FILES
information Default io/netty/handler/ssl/util/[Link] Suppress
should never Permissions io/netty/util/internal/[Link] android_t
be written into OWASP Top io/netty/util/internal/[Link] [Link]
a temp file. 10: M2: org/junit/rules/[Link] these file
Insecure Data
Storage
OWASP
MASVS:
MSTG-
STORAGE-2
7 IP Address warning CWE: Show Files Suppress
disclosure CWE-200: com/azure/storage/common/implementation/ android_i
Information connectionstring/[Link] [Link]
Exposure com/microsoft/azure/storage/[Link] Suppress
OWASP io/grpc/okhttp/[Link] android_i
MASVS: io/grpc/okhttp/[Link] [Link]
MSTG- io/netty/channel/epoll/[Link] these file
CODE-2 io/netty/handler/codec/http2/[Link]
io/netty/handler/codec/socksx/v4/[Link]
io/netty/handler/codec/socksx/v5/
[Link]
io/netty/handler/ssl/util/
[Link]
io/netty/resolver/dns/
[Link]
8 MD5 is a weak warning CWE: Show Files Suppress
hash known to CWE-327: Use com/azure/storage/common/implementation/ in [Link]
have hash of a Broken or [Link] Suppress
collisions. Risky com/microsoft/azure/storage/blob/[Link] in [Link]
Cryptographic com/microsoft/azure/storage/blob/[Link] from thes
Algorithm com/microsoft/azure/storage/blob/[Link]
OWASP Top com/microsoft/azure/storage/core/[Link]
10: M5: com/microsoft/azure/storage/file/[Link]
Insufficient com/microsoft/azure/storage/file/[Link]
Cryptography com/microsoft/azure/storage/file/[Link]
OWASP io/netty/handler/codec/http/websocketx/[Link]
MASVS:
MSTG-
CRYPTO-4
9 SHA-1 is a warning CWE: io/netty/handler/codec/http/websocketx/[Link] Suppress
weak hash CWE-327: Use in [Link]
known to have of a Broken or Suppress
hash collisions. Risky in [Link]
Cryptographic from thes
Algorithm
OWASP Top
10: M5:
Insufficient
Cryptography
OWASP
MASVS:
MSTG-
CRYPTO-4
10 App uses warning CWE: Show Files Suppress
SQLite CWE-89: com/mixpanel/android/mpmetrics/[Link] android_s
Database and Improper com/moengage/core/internal/storage/database/ [Link]
execute raw Neutralization [Link] Suppress
SQL query. of Special com/moengage/core/internal/storage/database/ android_s
Untrusted user Elements [Link] [Link]
input in raw used in an com/moengage/core/internal/storage/database/ these file
SQL queries SQL [Link]
NO ISSUE SEVERITY STANDARDS FILES
can cause SQL Command
Injection. Also ('SQL
sensitive Injection')
information OWASP Top
should be 10: M7: Client
encrypted and Code Quality
written to the
database.
11 App can read/ warning CWE: Show Files Suppress
write to CWE-276: com/kyn/helpers/[Link] android_r
External Incorrect com/kyn/ui/campaign/[Link] [Link]
Storage. Any Default com/kyn/ui/create/[Link] Suppress
App can read Permissions com/kyn/ui/profile/[Link] android_r
data written to OWASP Top com/kyn/ui/profile/presentation/[Link] [Link]
External 10: M2: com/kyn/utils/[Link] these file
Storage. Insecure Data
Storage
OWASP
MASVS:
MSTG-
STORAGE-2
12 This App info OWASP com/moengage/core/internal/utils/[Link] Suppress
copies data to MASVS: android_c
clipboard. MSTG- [Link]
Sensitive data STORAGE-10 Suppress
should not be android_c
copied to [Link]
clipboard as these file
other
applications
can access it.
13 App can write info CWE: com/amplitude/android/utilities/[Link] Suppress
to App CWE-276: android_w
Directory. Incorrect [Link]
Sensitive Default Suppress
Information Permissions android_w
should be OWASP [Link]
encrypted. MASVS: these file
MSTG-
STORAGE-14

You might also like