SYM_GEN_0046 - SymbioticSec/Symbiotic-Vulnerability-Database GitHub Wiki
Improper Export of Android Application Components
Property | Value |
---|---|
Language | generic |
Severity | |
CWE | CWE-926: Improper Export of Android Application Components |
OWASP | A5:2021 Security Misconfiguration |
Confidence Level | Medium |
Impact Level | Medium |
Likelihood Level | Medium |
Description
The application exports an activity. Any application on the device can launch the exported activity which may compromise the integrity of your application or its data. Ensure that any exported activities do not have privileged access to your application's control plane.