Home / Vulnerability Database / Objective-C : Unsafe SMS handling
Objective-C
Objective-C : Unsafe SMS handling
Classification
OWASP Mobile Top 10 2016
OWASP MASVS
Overview
This application uses SMS API. Incorrect usage of this API may violate user privacy.
The SMS protocol was primarily designed for user-to-user communication and is not well-suited for apps that want to transfer data.
Beware that SMS is neither encrypted nor strongly authenticated on either the network or the device. In particular, any SMS receiver should expect that a malicious user may have sent the SMS to your application. Don’t rely on unauthenticated SMS data to perform sensitive commands. Also, you should be aware that SMS may be subject to spoofing and/or interception on the network.
MEDIUM
DerScanner Severity Score
Do you want to fix Objective-C : Unsafe SMS handling in your application?
See also
Objective-C
Objective-C : Internal information leak
Objective-C
Objective-C : Weak hashing algorithm
Objective-C
