Description

Detects Android services that are marked as exported but lack proper protection mechanisms (like permissions or intent filters). Unprotected exported services can be accessed by any other application on the device, potentially leading to unauthorized access to sensitive functionality or data exposure.

Detection Strategy

• Triggers when a service component in AndroidManifest.xml has android:exported="true"

• Triggers when a service component has an intent-filter but no android:permission attribute

• Triggers when a service component has an intent-filter but no android:protectionLevel attribute set to signature or higher