Improper Export of Android Application Components
| Property | |
|---|---|
| Language | generic |
| Severity | |
| CWE | CWE-926: Improper Export of Android Application Components |
| OWASP | A5:2021 Security Misconfiguration |
| Confidence Level | Medium |
| Impact Level | Medium |
| Likelihood Level | Medium |
Description#
The application exports an activity. Any application on the device can launch the exported activity which may compromise the integrity of your application or its data. Ensure that any exported activities do not have privileged access to your application’s control plane.