DerScanner
Home / Vulnerability Database / Swift : Sensitive functionality exposure through IPC
Swift

Swift : Sensitive functionality exposure through IPC

Classification

OWASP Top 10 2017
A3-Sensitive Data Exposure
OWASP Top 10 2021
A2-Cryptographic Failures
OWASP MASVS
V6: 6.4.(L1/L2/L1+R/L2+R)
CWE
CWE-200
CWE/SANS Top 25 2021
CWE-200

Overview

The application exports sensitive data through IPC mechanisms without proper protection. Missing or improperly configured validation of universal links may lead to loss of sensitive data.

References

  1. CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
  2. Testing for Sensitive Functionality Exposure Through IPC (MSTG-PLATFORM-4)
  3. Supporting Universal Links in Your App
  4. OWASP Top Ten 2017. A3:2017-Sensitive Data Exposure
LOW

DerScanner Severity Score

Do you want to fix Swift : Sensitive functionality exposure through IPC in your application?

See also

Swift

Swift : Nill password

Swift

Swift : Hardcoded salt

Swift

Swift : Undocumented feature: special account