Description

The debug APK is available to anyone on the Internet.

Impact

- Host an APK in AWS. - Download the debug APK without any authentication, being able to analyze the application and find vulnerabilities easily.

Recommendation

Protect the APK behind some kind of authentication.

Threat

Anonymous attacker from the Internet.

Expected Remediation Time

⏱️ 60 minutes.

Requirements

Fixes