Lack of root detection
Description
The application does not check whether the Android system on which it is running has been rooted.
Impact
Install malicious tools in order to cause unexpected behaviors.
Recommendation
Validate that the device is not rooted at application startup.
Threat
Unauthorized attacker with a rooted device and the APK installed.
Expected Remediation Time
⏱️ 120 minutes.
Requirements
326 - Detect rooted devicesFixes
Score
Default score using CVSS 4.0. It may change depending on the context of the src.
Base 4.0
Attack vector
L
Attack complexity
L
Attack requirements
N
Privileges required
N
User interaction
N
Confidentiality (VC)
L
Integrity (VI)
L
Availability (VA)
N
Confidentiality (SC)
N
Integrity (SI)
N
Availability (SA)
N
Threat 4.0
Exploit maturity
X
Vector string
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N