Description

The application has the backup option active, which allows an attacker who has access to a users device to obtain the information stored by the application inside the device.

Impact

Obtain confidential user and application information.

Recommendation

Unless absolutely necessary, the application should not allow to backup itself.

Threat

Anonymous attacker with local access to a users device.

Expected Remediation Time

⏱️ 15 minutes.

Requirements

Fixes