SYM_GEN_0046 - SymbioticSec/Symbiotic-Vulnerability-Database GitHub Wiki

Improper Export of Android Application Components

Property Value
Language generic
Severity medium
CWE CWE-926: Improper Export of Android Application Components
OWASP A5:2021 Security Misconfiguration
Confidence Level Medium
Impact Level Medium
Likelihood Level Medium

Description

The application exports an activity. Any application on the device can launch the exported activity which may compromise the integrity of your application or its data. Ensure that any exported activities do not have privileged access to your application's control plane.