Home / Vulnerability Database / Objective-C : Information leak when entering background mode
Objective-C

Objective-C : Information leak when entering background mode

Classification

OWASP Mobile Top 10 2014
OWASP Mobile Top 10 2016
CWE/SANS Top 25 2021

Overview

Perhaps, the application does not override the default behavior when entering background mode. This may lead to valuable data leak.

When moving to the background mode, iOS takes a screenshot of the application. If valuable data was presented on the screen at the moment (for example, the user was entering a credit card number), its confidentiality may be violated. It is recommended to override the applicationDidEnterBackground method and replace the image on the screen with a predefined safe one.

MEDIUM

DerScanner Severity Score

Do you want to fix Objective-C : Information leak when entering background mode in your application?

See also

Objective-C

Objective-C : Internal information leak

Objective-C

Objective-C : Weak hashing algorithm

Objective-C

Objective-C : Unsafe reflection