DerScanner
Home / Vulnerability Database / Swift : Read sensitive data from disk
Swift

Swift : Read sensitive data from disk

Classification

OWASP Mobile Top 10 2014
M2-Insecure Data Storage
OWASP Mobile Top 10 2016
M2-Insecure Data Storage
OWASP MASVS
V2: 2.2.(L1/L2/L1+R/L2+R)
HIPAA
§164.312 (c)(1)
CWE
CWE-921CWE-922

Overview

The application reads sensitive data from a storage device.

Files written to external storage device are readable by all applications and can be changed. Besides, files stored in external storage will remain there even after the application is deleted. This can lead to a valuable data confidentiality loss.

References

  1. Reading, Writing, and Deleting Files in Swift by Corey Davis
  2. OWASP: Insecure Storage
  3. CWE-921: Storage of Sensitive Data in a Mechanism without Access Control
  4. CWE-922: Insecure Storage of Sensitive Information
MEDIUM

DerScanner Severity Score

Do you want to fix Swift : Read sensitive data from disk in your application?

See also

Swift

Swift : Nill password

Swift

Swift : Hardcoded salt

Swift

Swift : Undocumented feature: special account