导航菜单
登录 注册

应用安全检测报告

应用安全检测报告，支持文件搜索、内容检索和AI代码分析

移动应用安全检测报告

应用图标

Identity v0.85.2

Android APK 4c1316e3...
51
安全评分

安全基线评分

51/100

低风险

综合风险等级

风险等级评定
  1. A
  2. B
  3. C
  4. F

应用存在一定安全风险，建议优化

漏洞与安全项分布

2 高危
26 中危
4 信息
2 安全

隐私风险评估

2
第三方跟踪器

中等隐私风险
检测到少量第三方跟踪器


检测结果分布

高危安全漏洞 2
中危安全漏洞 26
安全提示信息 4
已通过安全项 2
重点安全关注 2

高危安全漏洞 应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。 

应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
cd/a.java, line(s) 29
jm/a.java, line(s) 90,113

高危安全漏洞 不安全的Web视图实现。Web视图忽略SSL证书错误并接受任何SSL证书。此应用程序易受MITM攻击 

不安全的Web视图实现。Web视图忽略SSL证书错误并接受任何SSL证书。此应用程序易受MITM攻击
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05g-Testing-Network-Communication.md#webview-server-certificate-verification

Files:
com/ui/uid/webview/d.java, line(s) 192,182

中危安全漏洞 应用已启用明文网络流量 

[android:usesCleartextTraffic=true]
应用允许明文网络流量（如 HTTP、FTP 协议、DownloadManager、MediaPlayer 等）。API 级别 27 及以下默认启用，28 及以上默认禁用。明文流量缺乏机密性、完整性和真实性保护，攻击者可窃听或篡改传输数据。建议关闭明文流量，仅使用加密协议。

中危安全漏洞 Activity (com.ui.android.ui.SchemeFilterActivity) 未受保护。 

[android:exported=true]
检测到  Activity 已导出，未受任何权限保护，任意应用均可访问。

中危安全漏洞 Service (com.ui.android.widget.UiRemoteViewService) 受权限保护，但应检查权限保护级别。 

Permission: android.permission.BIND_REMOTEVIEWS [android:exported=true]
检测到  Service 已导出并受未在本应用定义的权限保护。请在权限定义处核查其保护级别。若为 normal 或 dangerous，恶意应用可申请并与组件交互；若为 signature，仅同证书签名应用可访问。

中危安全漏洞 Service (com.wireguard.android.backend.GoBackend$VpnService) 受权限保护，但应检查权限保护级别。 

Permission: android.permission.BIND_VPN_SERVICE [android:exported=true]
检测到  Service 已导出并受未在本应用定义的权限保护。请在权限定义处核查其保护级别。若为 normal 或 dangerous，恶意应用可申请并与组件交互；若为 signature，仅同证书签名应用可访问。

中危安全漏洞 Service (de.blinkt.openvpn.core.OpenVPNService) 受权限保护，但应检查权限保护级别。 

Permission: android.permission.BIND_VPN_SERVICE [android:exported=true]
检测到  Service 已导出并受未在本应用定义的权限保护。请在权限定义处核查其保护级别。若为 normal 或 dangerous，恶意应用可申请并与组件交互；若为 signature，仅同证书签名应用可访问。

中危安全漏洞 Service (com.ui.access.cmpts.unlock.nfc.HceService) 受权限保护，但应检查权限保护级别。 

Permission: android.permission.BIND_NFC_SERVICE [android:exported=true]
检测到  Service 已导出并受未在本应用定义的权限保护。请在权限定义处核查其保护级别。若为 normal 或 dangerous，恶意应用可申请并与组件交互；若为 signature，仅同证书签名应用可访问。

中危安全漏洞 Broadcast Receiver (com.ui.access.receiver.MobileWaveReceiver) 未受保护。 

[android:exported=true]
检测到  Broadcast Receiver 已导出，未受任何权限保护，任意应用均可访问。

中危安全漏洞 Service (com.ui.access.cmpts.remotecall.VoipConnectionService) 受权限保护，但应检查权限保护级别。 

Permission: android.permission.BIND_TELECOM_CONNECTION_SERVICE [android:exported=true]
检测到  Service 已导出并受未在本应用定义的权限保护。请在权限定义处核查其保护级别。若为 normal 或 dangerous，恶意应用可申请并与组件交互；若为 signature，仅同证书签名应用可访问。

中危安全漏洞 Service (com.ui.access.cmpts.unlock.core.DeviceService) 受权限保护，但应检查权限保护级别。 

Permission: android.permission.BIND_COMPANION_DEVICE_SERVICE [android:exported=true]
检测到  Service 已导出并受未在本应用定义的权限保护。请在权限定义处核查其保护级别。若为 normal 或 dangerous，恶意应用可申请并与组件交互；若为 signature，仅同证书签名应用可访问。

中危安全漏洞 Activity (com.ui.bridgeimpl.ui.visitor.func.VisitorActivity) 未受保护。 

[android:exported=true]
检测到  Activity 已导出，未受任何权限保护，任意应用均可访问。

中危安全漏洞 Broadcast Receiver (com.google.firebase.iid.FirebaseInstanceIdReceiver) 受权限保护，但应检查权限保护级别。 

Permission: com.google.android.c2dm.permission.SEND [android:exported=true]
检测到  Broadcast Receiver 已导出并受未在本应用定义的权限保护。请在权限定义处核查其保护级别。若为 normal 或 dangerous，恶意应用可申请并与组件交互；若为 signature，仅同证书签名应用可访问。

中危安全漏洞 Activity (de.blinkt.openvpn.api.ConfirmDialog) 未受保护。 

[android:exported=true]
检测到  Activity 已导出，未受任何权限保护，任意应用均可访问。

中危安全漏洞 Broadcast Receiver (androidx.profileinstaller.ProfileInstallReceiver) 受权限保护，但应检查权限保护级别。 

Permission: android.permission.DUMP [android:exported=true]
检测到  Broadcast Receiver 已导出并受未在本应用定义的权限保护。请在权限定义处核查其保护级别。若为 normal 或 dangerous，恶意应用可申请并与组件交互；若为 signature，仅同证书签名应用可访问。

中危安全漏洞 Broadcast Receiver (no.nordicsemi.android.support.v18.scanner.PendingIntentReceiver) 未受保护。 

[android:exported=true]
检测到  Broadcast Receiver 已导出，未受任何权限保护，任意应用均可访问。

中危安全漏洞 IP地址泄露 

IP地址泄露


Files:
c90/C0490e0.java, line(s) 55,65
de/blinkt/openvpn/core/OpenVPNService.java, line(s) 752,947,950,966
de/blinkt/openvpn/core/OpenVPNThreadv3.java, line(s) 344,344,344
de/blinkt/openvpn/core/OpenVpnManagementThread.java, line(s) 53
de/blinkt/openvpn/core/OrbotHelper.java, line(s) 52
de/blinkt/openvpn/core/X509Utils.java, line(s) 114,115
n90/o2.java, line(s) 123
q9/g.java, line(s) 104,323,327,333
qf0/o2.java, line(s) 134
te0/f.java, line(s) 43
ul/c.java, line(s) 84

中危安全漏洞 应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据 

应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#external-storage

Files:
b90/f.java, line(s) 46,176
b90/i.java, line(s) 17
c90/C0674l.java, line(s) 79
c90/c2.java, line(s) 38,46
c90/d2.java, line(s) 153,158
c90/q0.java, line(s) 56
com/github/mikephil/charting/charts/Chart.java, line(s) 561,608
com/github/mikephil/charting/utils/FileUtils.java, line(s) 141,169
com/uum/basebusiness/ui/browser/WebBrowserActivity.java, line(s) 321
com/uum/uiduser/cmpts/utils/PictureSelectorObserver.java, line(s) 138
com/yalantis/ucrop/util/FileUtils.java, line(s) 70
dm/c.java, line(s) 7
dm/k.java, line(s) 12,27
hx/v.java, line(s) 48
io/agora/rtc/internal/CommonUtility.java, line(s) 379,379
q9/q.java, line(s) 11,28
rg0/v.java, line(s) 52
uq/l.java, line(s) 85
v50/c2.java, line(s) 107,115
v50/d2.java, line(s) 154,159
v50/q0.java, line(s) 41
yh0/C0347c.java, line(s) 224,229,252
yp/i1.java, line(s) 107,169

中危安全漏洞 文件可能包含硬编码的敏感信息，如用户名、密码、密钥等 

文件可能包含硬编码的敏感信息，如用户名、密码、密钥等
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#checking-memory-for-sensitive-data-mstg-storage-10

Files:
as/a.java, line(s) 57
cl0/OpaqueKey.java, line(s) 28
cl0/SlotReader.java, line(s) 408
cl0/TypefaceRequest.java, line(s) 86
com/twilio/voice/EventKeys.java, line(s) 5,11,15,16,18,48,49,51,54,60,59
com/twilio/voice/HttpsRegistrar.java, line(s) 16,17
com/twilio/voice/VoiceURLConnection.java, line(s) 10,11,13
com/twilio/voice/WarningEventConstants.java, line(s) 9
com/ubnt/models/AdoptDevicesPayload.java, line(s) 82
com/ubnt/models/AdoptionKey.java, line(s) 48
com/ubnt/models/Bootstrap.java, line(s) 629
com/ubnt/models/Country.java, line(s) 102
com/ubnt/models/DeviceController.java, line(s) 60,66,1938,1938
com/ubnt/models/DevicePassword.java, line(s) 48
com/ubnt/models/Location.java, line(s) 292
com/ubnt/models/ManageWifi.java, line(s) 66
com/ubnt/models/NvrAdoptBody.java, line(s) 67
com/ubnt/models/NvrLoginBody.java, line(s) 83
com/ubnt/models/NvrUmcSetupPayload.java, line(s) 198,198
com/ubnt/models/WifiSettings.java, line(s) 97
com/ubnt/net/pojos/User.java, line(s) 35,572
com/ubnt/net/pojos/UserApiKeyResponse.java, line(s) 48
com/ubnt/net/pojos/sso/SsoUser.java, line(s) 147
com/ubnt/unicam/q.java, line(s) 91
com/ubnt/views/preferences/ProtectRadioGroupPreference.java, line(s) 60
com/ui/access/cmpts/rtc/direct/utils/UCoreCloudCredentials.java, line(s) 147
com/ui/access/cmpts/rtc/direct/utils/UCoreTurnCredentials.java, line(s) 132
com/ui/access/repository/models/AccessEmergencyParam.java, line(s) 85
com/ui/access/repository/models/BtToken.java, line(s) 172
com/ui/access/repository/models/PrivateKey.java, line(s) 66
com/ui/android/ui/main/wallet/WalletViewState.java, line(s) 277
com/ui/android/ui/setting/touchpass/TouchPassViewState.java, line(s) 117
com/ui/notification/ui/notice/create/timezone/child/f.java, line(s) 140
com/ui/uidaccess/ui/map/bean/WesIssueDetail.java, line(s) 294
com/ui/uidaccess/ui/map/bean/WesMapInfo.java, line(s) 227
com/ui/uidaccess/ui/map/bean/WesOverviewWrapper.java, line(s) 70
com/ui/unifi/core/base/net/client/http/models/AuthorizeRequest.java, line(s) 137
com/ui/unifi/core/base/net/models/CloudCredentials.java, line(s) 197
com/ui/unifi/core/base/net/models/TurnCredentials.java, line(s) 167
com/ui/unifi/core/sso/models/CreateAccountError.java, line(s) 22
com/ui/unifi/core/sso/models/CreateSsoUser.java, line(s) 242,242
com/ui/unifi/core/sso/models/ForgotPasswordRequest.java, line(s) 98
com/ui/unifi/core/sso/models/PasswordStrengthRequest.java, line(s) 112
com/ui/unifi/core/sso/models/ResendVerificationEmailRequest.java, line(s) 98
com/ui/unifi/core/sso/models/SsoSignInBody.java, line(s) 158
com/ui/unifi/core/sso/models/SsoUser.java, line(s) 227
com/ui/user/ui/profile/ProfileViewState.java, line(s) 211,211
com/ui/user/ui/timeoff/TimeOffLogState.java, line(s) 139
com/ui/user/ui/userlist/UserListViewState.java, line(s) 274
com/ui/user/ui/userlist/t.java, line(s) 193
com/uid/unifi/UidConsoleInfo.java, line(s) 680
com/uum/application/ui/assignapp/c.java, line(s) 126
com/uum/base/func/select/data/RoleNode.java, line(s) 215
com/uum/data/args/TouchPassDetailArgs.java, line(s) 148,148
com/uum/data/models/Privilege.java, line(s) 105,105
com/uum/data/models/access/Contract.java, line(s) 150
com/uum/data/models/access/ProfileArgs.java, line(s) 102
com/uum/data/models/access/ProfileViewState.java, line(s) 215,215
com/uum/data/models/access/SiteAdvanceInfo.java, line(s) 208,208
com/uum/data/models/access/TouchPassArg.java, line(s) 74
com/uum/data/models/access/UADeviceConfig.java, line(s) 109
com/uum/data/models/account/AddUserParam.java, line(s) 323
com/uum/data/models/account/Company.java, line(s) 254
com/uum/data/models/account/Profile.java, line(s) 396
com/uum/data/models/account/Role.java, line(s) 333
com/uum/data/models/account/SitePrivilegesSettings.java, line(s) 185
com/uum/data/models/app/UsedLimit.java, line(s) 108
com/uum/data/models/da/EditSiteAdminParam.java, line(s) 133
com/uum/data/models/device/Camera.java, line(s) 246,246
com/uum/data/models/device/ControllerBean.java, line(s) 165
com/uum/data/models/device/DeviceConfig.java, line(s) 115
com/uum/data/models/device/DeviceConfigParam.java, line(s) 79
com/uum/data/models/device/HostDeviceAdminParam.java, line(s) 206
com/uum/data/models/device/ResourceBean.java, line(s) 154
com/uum/data/models/device/SubResourceBean.java, line(s) 123
com/uum/data/models/idp/AssignedUser.java, line(s) 373
com/uum/data/models/idp/ProvisionSetting.java, line(s) 148
com/uum/data/models/idp/TemplateAdvancedForm.java, line(s) 87
com/uum/data/models/log/CategoryFilterItem.java, line(s) 95
com/uum/data/models/log/LogEntryData.java, line(s) 127
com/uum/data/models/log/LogEventType.java, line(s) 139
com/uum/data/models/log/Rendering.java, line(s) 124
com/uum/data/models/log/SystemLogKey.java, line(s) 98
com/uum/data/models/log/Type.java, line(s) 110
com/uum/data/models/login/CompanyIdentityProvider.java, line(s) 289
com/uum/data/models/login/EndpointsInfo.java, line(s) 151
com/uum/data/models/login/IdpParam.java, line(s) 81
com/uum/data/models/login/LoginParams.java, line(s) 84
com/uum/data/models/nfc/NfcSecret.java, line(s) 114
com/uum/data/models/notification/APIKey.java, line(s) 50
com/uum/data/models/notification/Client.java, line(s) 89
com/uum/data/models/notification/DisplayBody.java, line(s) 731
com/uum/data/models/notification/message/NoticeDetail.java, line(s) 1042
com/uum/data/models/notification/message/NoticeRoleInfo.java, line(s) 182
com/uum/data/models/notification/message/PublishedNotice.java, line(s) 388
com/uum/data/models/site/UserSiteAdminInfo.java, line(s) 244
com/uum/data/models/uiduser/CompanyWorkerInfo.java, line(s) 737,737
com/uum/data/models/uiduser/PinCodeParams.java, line(s) 50
com/uum/data/models/uiduser/Role.java, line(s) 371
com/uum/data/models/uiduser/SiteAdmin.java, line(s) 294
com/uum/data/models/uiduser/UserLifecycleOperationParam.java, line(s) 102
com/uum/data/models/uiduser/UserLifecycleOperationResult.java, line(s) 66
com/uum/data/models/uiduser/WorkerData.java, line(s) 50,304
com/uum/data/models/user/RoleSelect.java, line(s) 125
com/uum/data/models/user/SimpleRole.java, line(s) 303
com/uum/data/models/visitor/Visitor.java, line(s) 605,605
com/uum/helpdesk/repository/models/RoleKeysParam.java, line(s) 66
com/uum/identification/ui/facemanage/FaceRecord/UserFaceViewArg.java, line(s) 65
com/uum/identification/ui/facemanage/FaceRecord/UserFaceViewState.java, line(s) 101
com/uum/identification/ui/facemanage/FaceRecord/k.java, line(s) 119
com/uum/identification/ui/nfcmanager/l.java, line(s) 152
com/uum/network/repository/models/IotPPskInfoBean.java, line(s) 138
com/uum/network/repository/models/WifiCredential.java, line(s) 197
com/uum/uidnetwork/repository/models/Authentication.java, line(s) 148
com/uum/uidnetwork/repository/models/Credentials.java, line(s) 127
com/uum/uidnetwork/repository/models/IotPPskInfoBean.java, line(s) 137
com/uum/uidnetwork/repository/models/WiFiSettingParam.java, line(s) 107
com/uum/uidnetwork/ui/wifi/dashboard/guest/WiFiGuestState.java, line(s) 290,290
com/uum/uiduser/ui/add/z.java, line(s) 130
com/uum/uiduser/ui/detail2/fragment/UserAssignState2.java, line(s) 411
com/uum/uiduser/ui/list/k.java, line(s) 182
com/uum/uiduser/ui/pass/TouchPassDetailState.java, line(s) 205
com/uum/uiduser/ui/profile/profileedit/y.java, line(s) 112
com/uum/uiduser/ui/search/g.java, line(s) 118
com/uum/uiduser/ui/search/r.java, line(s) 122
com/uum/uiduser/uirole/rolelist/i.java, line(s) 157
com/uum/vpn/repository/models/VpnCredential.java, line(s) 121
cs/u.java, line(s) 79,48
dv/f.java, line(s) 133
f50/TouchPassUserArgs.java, line(s) 66
g4/a.java, line(s) 75
g70/HelpDeskSearchViewState.java, line(s) 197
hp0/r.java, line(s) 85,154
ie0/i0.java, line(s) 172
j60/Preference.java, line(s) 45
jv/EachAdminCount.java, line(s) 99
l20/d0.java, line(s) 158
l20/y.java, line(s) 112
m50/w.java, line(s) 169
n8/g.java, line(s) 70
o00/SsoClientConfig.java, line(s) 44
ov/f.java, line(s) 157
ov/m.java, line(s) 144
pr/e0.java, line(s) 1317
q80/a.java, line(s) 19
qd0/d.java, line(s) 95
qf0/e0.java, line(s) 1231
qp/AppProperty.java, line(s) 44
qp/ControllerProperty.java, line(s) 52
qp/DevicePasswordInfo.java, line(s) 45
qp/LocalConsoleInfo.java, line(s) 100
qp/SessionProperty.java, line(s) 44
sd0/d.java, line(s) 156
sl0/x0.java, line(s) 59
sz/WesResultState.java, line(s) 213
tz/z.java, line(s) 166
u20/DataSearchHolder.java, line(s) 173
u20/PageSearchHolder.java, line(s) 197
v20/SelectActivityParam.java, line(s) 283
vd0/q.java, line(s) 151
w90/PasswordViewState.java, line(s) 98
x20/WebPermissionInfo.java, line(s) 113
x20/WebRole.java, line(s) 57
x60/j.java, line(s) 67
y20/GroupSelectState.java, line(s) 148
y20/GroupUserState.java, line(s) 149
y20/RoleSelectState.java, line(s) 148
y20/SiteSelectState.java, line(s) 148
y20/UserPageState.java, line(s) 167
yh0/C0354j.java, line(s) 64
yh0/C0572f.java, line(s) 145
yh0/C0579m.java, line(s) 132
yh0/ConnectionOptions.java, line(s) 117
yh0/EventTimelineCache.java, line(s) 46
yh0/SsoClientConfig.java, line(s) 45
yn/EventTimelineCache.java, line(s) 46
z70/i.java, line(s) 97
zn/ConnectionOptions.java, line(s) 115
zz/r.java, line(s) 82,151

中危安全漏洞 应用程序使用不安全的随机数生成器 

应用程序使用不安全的随机数生成器
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#weak-random-number-generators

Files:
c90/C0520v.java, line(s) 22
c90/s1.java, line(s) 11
com/ui/uidaccess/ui/base/widget/WireView.java, line(s) 19
im0/z.java, line(s) 12
io/agora/rtc/audio/MediaCodecAudioDecoder.java, line(s) 22
k4/l1.java, line(s) 8
k80/c.java, line(s) 6
pi0/a.java, line(s) 3
pi0/b.java, line(s) 3
q4/t.java, line(s) 4
qi0/a.java, line(s) 3
v50/s1.java, line(s) 11
v50/v.java, line(s) 22
wm0/d.java, line(s) 17
wm0/h.java, line(s) 6

中危安全漏洞 MD5是已知存在哈希冲突的弱哈希 

MD5是已知存在哈希冲突的弱哈希
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
b90/k.java, line(s) 10
com/twilio/voice/SidUtil.java, line(s) 33
m10/s.java, line(s) 11
q9/n.java, line(s) 44
tx/b.java, line(s) 26
vj/c.java, line(s) 196
vy/e.java, line(s) 25

中危安全漏洞 应用程序创建临时文件。敏感信息永远不应该被写进临时文件 

应用程序创建临时文件。敏感信息永远不应该被写进临时文件


Files:
c70/n.java, line(s) 581
com/ubnt/activities/timelapse/o.java, line(s) 598
com/ubnt/models/pojos/o.java, line(s) 568
com/uum/uiduser/cmpts/utils/PictureSelectorObserver.java, line(s) 126,132
df0/h.java, line(s) 85
f6/b.java, line(s) 240
rh/c.java, line(s) 81
w/u.java, line(s) 136

中危安全漏洞 应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库 

应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04h-Testing-Code-Quality.md#injection-flaws-mstg-arch-2-and-mstg-platform-2

Files:
m6/c.java, line(s) 4,5,6,7,8,93,95
net/sqlcipher/database/SQLiteDatabase.java, line(s) 1368,1387,358,388,821,828,1090,1352,1472,1608,1631,1782
t9/a.java, line(s) 6,7,78
ub/m0.java, line(s) 5,6,69,106,125,134,184,295,312,610
ub/t0.java, line(s) 4,5,125
wj/e.java, line(s) 6,7,67,96,135,154,175,192

中危安全漏洞 SHA-1是已知存在哈希冲突的弱哈希 

SHA-1是已知存在哈希冲突的弱哈希
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
de/blinkt/openvpn/core/LogItem.java, line(s) 58
is/c.java, line(s) 38
jm/a.java, line(s) 149
jn0/d.java, line(s) 122
n90/o2.java, line(s) 513
qf0/o2.java, line(s) 508
rh/b.java, line(s) 53

中危安全漏洞 此应用程序可能会请求root（超级用户）权限 

此应用程序可能会请求root（超级用户）权限
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05j-Testing-Resiliency-Against-Reverse-Engineering.md#testing-root-detection-mstg-resilience-1

Files:
fl/a.java, line(s) 7,7,7,9,7,9,7,7

中危安全漏洞 Firebase远程配置已启用 

Firebase远程配置URL （ https://firebaseremoteconfig.googleapis.com/v1/projects/793546406255/namespaces/firebase:fetch?key=AIzaSyDTEGf5-KTLvY9YtNb1IFTLiNzqlDKjD0w ） 已启用。请确保这些配置不包含敏感信息。响应内容如下所示：

{
    "entries": {
        "appRateIntervalDays": "30",
        "appRateLikeIntervalDays": "90"
    },
    "state": "UPDATE",
    "templateVersion": "1"
}

中危安全漏洞 应用程序包含隐私跟踪程序 

此应用程序有多个2隐私跟踪程序。跟踪器可以跟踪设备或用户，是终端用户的隐私问题。

中危安全漏洞 此应用可能包含硬编码机密信息 

从应用程序中识别出以下机密确保这些不是机密或私人信息
凭证信息=> "com.google.android.geo.API_KEY" : "AIzaSyBxM5U6wPAd9whi4iAC2nRFSu0He0zJwkM"
高德地图的=> "com.amap.api.v2.apikey" : "1c10610420eab2faffea448d6da1f742"
"app_authentication_preferences_setting_title" : "Authentication"
"com.google.firebase.crashlytics.mapping_file_id" : "fb62238165dc4573a7bd101dbd81907f"
"debugSettingsReviewBypass" : "reviewBypass"
"firebase_database_url" : "https://passport-bea20.firebaseio.com"
"google_api_key" : "AIzaSyDTEGf5-KTLvY9YtNb1IFTLiNzqlDKjD0w"
"google_app_id" : "1:793546406255:android:0ad48c3cc6ccda2c63d09a"
"google_crash_reporting_api_key" : "AIzaSyDTEGf5-KTLvY9YtNb1IFTLiNzqlDKjD0w"
"identification_credentials_title" : "Credentials"
"library_android_database_sqlcipher_authorWebsite" : "https://www.zetetic.net/sqlcipher/"
"login_account_password" : "Account/Password"
"manager_feedback_category_user" : "User"
"mapbox_access_token" : "sk.eyJ1IjoidWlkLWRldiIsImEiOiJjbDA2ZjVvczMwdTQyM2pudGN2M3YyOG1tIn0.J-agTYYGvi6IRZvSsLHcwQ"
"network_guest_authentication" : "Authentication"
"network_wifi_voucher_key_pwd_title" : "Passwords(%1$d)"
"network_wifi_voucher_key_used" : "Used"
"password" : "Password"
"settings_auth" : "Authentication/Encryption"
"state_auth" : "Authenticating"
"systemlog_capture_credential_title" : "Credential"
"user_add_password" : "Password"
"user_mfa_ui_key" : "Passkeys"
"usession_install" : "Install"
"usession_open" : "Open"
"uum_door_device_credential_beta" : "BETA"
"uum_door_device_credential_nfc" : "NFC"
"uum_door_device_credential_pin" : "PIN"
"uum_door_device_credentials" : "Credentials"
"uum_door_pin_keypad_layout_fixed" : "Fixed"
"uum_door_pin_keypad_layout_random" : "Random"
"uum_password" : "Password"
"uum_username" : "Username"
"visitor_credential_mobile_access_authorized" : "Authorized"
"visitor_credential_none" : "None"
"visitor_credential_pin" : "PIN"
"visitor_credentials_file_uid_access" : "credentialsfile.uid.access"
"visitor_detail_credential" : "Credential"
"vpn_personal_password_open_vpn_tip" : "(OpenVPN)"
eebdbea1436dda66bb95658783ae5133
77147d037bd99fe3ab35265aeb7a4512
ce6ffdc4-1c92-45f6-adcf-6beae9e1bb95
c02c33803066d34b9516e5f5994b0c88
9c2d4868-497f-4758-a5d5-d87a5b35b091
b1f6f1bb-4a40-4e0e-ad3f-c5fea0da2a9c
4aa6a764a6c4071bb217c658c33b058c
100e702e209a9721d0937cabc1bf6461
287a7892eba4fed0b7d8e91d9cf4d6e0
1bd1017a9716d307f36ee181af0b8343
d3784320-1c25-43d1-b7a0-5b640bf2adff
538d7c59add62cc88c4dd0409c56eeec
c7413e9a50eb9cd288df4a90153c563a
3878236820a09156500a9af83da6f243
4e65adeb8286ae6fe07a9507ddf4b9c6
dd3b76a085d97a5064b4102e9b62c4c3
127e181e-8e08-4f85-9f9c-84d2c7285f40
1b7bdbfb-77e4-4215-8739-fd0ccc0e4464
eae65307-0f03-4a8e-816f-071b8d65fc83
70154cb6-565a-48e4-a168-6706c71d81cf
1ebed7f4-dd78-4d2c-b5d0-6adfaa2a4587
f90ebcab6ef4d9b893e80237c77b4db1
da332acdf1bc7e9cb30446bea71f0835
67b553529d0e523ca9dd4826076c5f3f
4ac3ba3d-5c09-1e64-1813-375cd2242f65
ca9f37c7c3c7e5f51022969062d7fcc
8eeb0dea-f4cd-4c8a-8e6e-5e385ca18dae
3e525dc73a7ab869541ccffea6aad4b8
f6ac3f8a-6c0b-4403-a1bc-8bf4b5d13dd8
2ebc1024e87e04351eff47b7ffba72a1
137d6537-f2d8-413b-8eb7-565abbb69498
3db5fcdb-d4e7-4b29-9ed8-322b80749ea7
79325618-9184-4039-a4f2-af8c202dd60d
9af69ede-feaa-40c1-abe5-e85bed8afcd1
d8594ad6c9cf32910b210da58ace5d25
0fd8c390-a0e8-4cb2-b93a-7b3051c83c46
a36e12955a3cd9579c735978ad8fe4c9
219f5b9ab3cf4b3a973e7fd4a3a2a407
d971fee4-ed77-4900-bcdd-231dd29da0b8
9f313e678c92ba3d3c265d762d799855
26109bc1c764cda75815ba385c1a3ab1
e06fdc4f-c73f-2124-775b-6ab68813fae6
b344d4550f0aa10e53aad419f0fb8cca
46fc4ed2-592f-45d7-8644-760b22d61da0
7f8b8d33edad5310dfe9bc2db44603d5
3fadd594-e932-43f6-9f85-37fa624c262e
7cd020bb420eee4de12a607c373ecf59
74507e2dcdce07e532be5ae88b34c142
b129f4923e8439a7a3c5e75a69d2a780
79fdd0a1-30a4-48f3-9ad2-3fc155e2ba15
89a4a559e7cb92a9906023f8d78e519f
caf4395d-53d6-4a67-93fb-69c7dd879c93
98fdeb969892cd4d0b78bfbdbfcd361e
45c4d5f2b39a589ab122015ad510e5b7
f03ae490784a9b90f390c2eb34dcd7c6
298d093c5dfc47b9831a21cbb7e95678
c90e226d-2a4b-4660-8122-df65cfbd3ea8
4f003e117ef2d78df734c3fff0792015
2ea6ed248176e525880d577f10ea8f41
3a14269018a73dcd08edac799de2d9ea
55bb4883-bd13-b3f4-525b-9ea01698b214
d7cd63613b3baf0b239f0bf05aca161c
642916c5-9089-4c8d-b108-28216594d7c8
ec46ada5-d87d-419b-abed-7ebc83aac7c0
8e9951b6d0d2e75b63ab0e40e026e69f
f332b99bb57c40ace2c13365d72a6e9a
e35a45247f382d2f952ffb1d7f3450f2
cb52d99d50f3a1aad1554c0d4807e10d
5d4011429fb55b2e8d83d294b38c6a30
048c75b4-af8a-4991-84b6-dc7fc3858d3f
53f97d5f0b56ceff5f7b9e595ddeac4e
e30506e555aaac0cb03f03c0d9af3684
3b06f348eeea65f3f91dd707dad09e33
1c251e8b-eeb4-4283-b8cd-644c1dba1bb0
86e181a61833e6bafbc09d020eea84ab
976f1978-61d5-4f05-b6df-d763417023cc
738d9bad-9477-41c4-8d8d-60a40df0d302
343b7890-9b38-21f4-007b-b1fc76d8fbe3
002d9f59-1269-4693-9f15-44a0a92d4961
6b92c854-b0a3-4cf1-8f74-82fcf091214f
81db6f9b-716f-4eda-98cc-db2f38963d26
0c430d0c-00ef-4367-bc6f-ca7c51e6b61f
c04b774e7ecac1c1101b39cdf6309b46
3904d899-2536-40db-b437-055eb0bd61df
2621284c214343dc8c683e8e3828fef7
929d92b5-c2c9-435e-be50-a6d6eea160ec
ed363c4b-f06e-4579-a977-90f31f590bfb
733963715db14ce4616ef7044ba044df
4ae14b68-eec8-40f4-8e74-81711b03413b
66ae1f37cf48e5936c8d7a01f6c88578
1a22bf823c2ee77951b21b88a14c39d5
e3d2d8d483fd447764db0865ce09cea9
3d6e6846-3f61-486e-a87d-fa70b6728915
d5f28bcd-c761-4ae0-a8f2-dfaa7e8bf1c5
c79d3316149464b441d337d2c576d249
799b84eb-1fa5-4f80-bb69-11d5acbf6f7c
59593adaffca0b519b4ec5ca1a4f3d68
63ff0828-8a02-4625-85bb-b6cae8c89018
1d0ae2b338a82f05c4fcabbe60b93eed
8371ecdda1f00f1636a2eefadf0d7d47
14612913-3fb1-4524-97f9-edc40085d1fe
508d8526646f95fdcff6e6c1918eebca
921e4d7c-e479-4d44-8ddc-3b375fee1d42
5271c2aea09262280ce232bf4ea43c2d
48c19000e383b85e9759ae99fc671bf1
65ea9a34-0f7d-41fd-ba66-d440716e6497
2417e07f-c992-44ce-9fa0-4935a346a64e
1ccfb2de-23cd-4966-802d-2b7237980910
2d6823f4-f2a9-4ee1-80df-57d14cd6644c
147b33e943f0554de8319249584f9449
95e21b3b-9804-c9c4-93c3-77f50834d994
af0f4041-c677-442d-b5ea-47ad5554048e
dc486900b771c8399b258ad16736689a
717d100bc54c02f91dfdb70555e14f02
89765e7e5f0a09fc301d4f4b67bd0256
b1dc5ee2-b486-41ac-851e-890b12c2b577
6868ac9f-fb18-4f2c-9b01-50ab0743907d
39465eabf0136c244d2b74c98259ec1a
10ee0377-c62a-4744-543b-fe77294277e5
cfd458c54518f469e93383e525e78e43
d5dd90c5d418c30207e8cb5624fe7447
ddc73cbb3ee3346550f5a7f2e0285f04
ef9e0cf4c75839b697ec17ae571562c3
d3cb945e-60aa-4498-af28-f630263611b1
151813f5-4cd2-e834-411b-fb5a48df1fb1
3608354e-bf8b-4624-ba94-76197c144ae4
56bb6ccf-3507-5c94-f3a3-4d79b483e314
2140b073-c029-40be-a87d-e9b563e44717
5f09381ae2b006640acf0ea2d80e54e0
1fbaef522598bbeeef023f784e1bbcb4
e6fe8013-42fc-41c2-b254-577e88db0c06
9287211b-af83-4542-97fb-f9a845475309
ff3d0b52-98ac-4590-b991-c9f90324df9c
99bdd541b6c2e363f89a349164c41760
d2f8e8e9fa3cb6d6e52499838ad28134
5cca18ab4d89c970c48bdbfeb6c0793c
c1163ed7-3ce0-442b-9a6b-77a85bd88944
b4b3f031939b44f21c175bb316a7bd52
0f83bda7-0dd3-4448-a332-b7c37ad175be
0b84c85c-b44c-f584-d38b-6a078efe66ea
cc483a02974d1f28b8ac74a1e69551a4
59352787-2e1d-4dcd-874d-d351b6a8938d
38d3fc52-7bfb-4386-bde6-fc0f4c55b157
2661e603-6e20-479d-982d-6cb3dcd159cd
d6fa30e8a0bce387cbcf835db9c222e5
1ff4144493fe392925f66745304ff322
5c204d5db6ea1ac770b8cf51d4f1d862
e9f9100ebab812c607cc6f6548ea4e0a
746f33f5-7462-46ee-a824-b0fc08515eff
a63ee8dd1262ba6641a7fe0eca6f36cc
bb392ec0-8d4d-11e0-a896-0002a5d5c51b
9c016e33-4c18-2674-60db-51005817f2e4
158a3b2d-0bab-45c0-97f1-1625955f2031
7dd6dfd81982cc7440c06640c8e66ecd
258EAFA5-E914-47DA-95CA-C5AB0DC85B11
54167124-c67e-1b94-7b83-d6cf5607422e
8746c13b0aa33e7d77f1a84665f6bf50
66e681215a9761f657e8a45cce68c26e
25c5e4f8-c354-4c2b-8866-ab6e87b40cc4
1812513c-f8a1-41c1-a698-86ac70b8bd87
37b78600-c4ed-444a-af4e-5505435370be
7A5E2E49-A12C-4230-A8C4-E6ED80EE6A5E
a5b7d4de5b523b143dc452742fbf2660
ec36967d7df67062424ce529e917f58e
0e0b8c53-a4a1-48bf-9f5f-7324b93e388f
26816cf6-334b-4580-bc3f-f1b72ef5d93e
1f9847ce927145353344c5a47e04fc55
9185f35a-f2c5-4ad4-987e-a9528ddb3494
cd661048a838bc1ff60222a6a68cdb3f
f84256a59d5ec75bb25358d88caf358b
4d26241c360f64392ee118429deaf3ab
b84439f413b3ed0b84073444f7b7479a
ecf578665ded4f14cf739c792bcbfd8f
a2eefaa1-196e-c3f4-01bb-7db500a4d29a
ae4194d1-451c-427c-9946-a390c19e09e1
9ccac6e35c09355b0675eb7dfbb48775
56baa9c404e8ad1006cbb47755977cba
083a04a28065f7868b0a73609d778230
06d4277c-3dd3-4691-8aac-3e140abb8699
3d6a6c6e27eb961a12b6a685f789954b
10b506c313309ee149a883217505944b
0638cb1f0d7890c9d6c906a76d98419f
9f413c5a85aa1d610035473368ce2bb4
3288444f002474b27c076cfc801d3d0c
0b478f1a-7b25-4557-a692-2b25488f1985
e7365bb1-8bb9-4749-87d2-e842c992948a
93737102a743ce8528f366058e0a1e95
0a292e1a-173b-456a-8da5-6dc02787ca64
d3331f5c-b661-4790-8257-0583af660553
9e151adcddff6f74796718ed9b1a7e02
5b69b9a0fa442bf54ce75e8789a72323
85035bdb-bf41-499f-ad8c-a7256fbb3b96
027b512138f9d75f7c4c7514655000d1
e756dc71-b12c-442c-9c43-efa65ec5fdd8
932ddc31f7d0ab2a66531ee6c36b4a93
8c5965a0983cadd2eec4679def0aa016
e6c444a789e3108caa51da9dc4897ba6
07e550ac075fe1f738be04750391ee3a
05b7c28a747dffc2390f2e27930a778a
d13d64fa03d49aa24c9a9745dd1da09e
c9fbe3937dfbc815d312510dd0e35018
4a4722f355074f13d9a4ea8e3dbca7be
1b4cc56dda2c98bd71586ed5cc821d5a
fb398335f015a02e4eaba7a268558888
798c84608c785198bf6de1d4d0644167
526e9f341fff54e6f39e97f1ef8f60fd
3382527b-3487-43b4-864a-aa75320aff08
ac8e919ac27799882e691ab4d746b1f7
c7b9837d-00e9-498b-bdfa-6afcfa1b30ad
1ea5a09b-8634-7df4-b313-7f9a29cd8c4d
7fd44273-4eb5-4724-8c61-ecea476f172a
8dc148ad-2825-450c-af1b-b10888bc1260
9ebd57cf0d277493b6a4266658f257ac
054e1ac8-1ad8-4c10-a0de-e55fc4f268e5
6658a780-34ac-415e-8291-08c2962b1201
cdf47ea27c67fb701a76e5c7466e8ed6
142cd194-8164-46a1-ba48-bef078757393
049df97a-5894-408c-bc87-b4872b2a6346
deba1d58ee3b3b3d69cbe23f0afc75c2
40ae7055-11f8-4c8e-9a58-a4c6eead2055
c10ad8b6-e898-4c97-80e6-f8dabcd68d4e
88d177f9f6356a62b3105ed704fc952e
adabbe78a22c7660d3f9d44052aab4e9
59a52bba-e33b-4739-a82d-7e875c8ded0e
7ff76992a2501b506330a722ab470fcb
902811bb713ab57ca7f8060cccdfe73c
ae3ed5d2edb58223f5ad4b554efee120
8458e245da56a4cbdd8ff7610d4f9e52
3b007904ec2ddfd71e05bcaf40dce046
d83b80e3-e81f-4f66-879b-779be5f6a693
a7d619f8-6c63-4b12-b8a0-2db2fad8e9d3
93630edb-b5f4-4484-85e8-b4906947f59c
8c4c9229-c7d3-43ba-bd41-2b6061e8add2
0e17a4b9-e658-4b70-809b-0554eb17794c
9ba9e16e63358d0f901963facc0f3598
37c957313385cf606ce5008372da48b7
4304571e5725c9a4bb08fa88566ab5e0
be181b8d0333db64096014d4dfc191ff
74fa25dd073f2f833e72acd2436d2ec0
0d61e9d3-2009-45ac-b695-08605f3a883f
3243e044-ad0b-4872-a6d4-ab457f1afdcf
3a954d4c-c447-c184-30eb-ed5c0450c022
a04de54c-2bbc-0ff4-5a73-fac26b7065d2
0d12f8ebb73a9a7fcc38cf6654a0868a
143d947243b394ab4195cdbbf0b9c4f8
ed67d43e-2d5c-4928-ace8-edf984baeff1
9b191204edb287311167ba13473bea8f
a8249c255faca77dbdb21867ae821823
3213bf2c618b28eb8eecffc09f4b06e9
73031b2b0f8215524fbf8a67869cd086
0D8479BF-C8D8-4D24-83A6-96E627318A33
20006e476a3471febc08a7a2f281b7ac
7983cd58-b97a-489c-91b8-7a2265d7ff21
4a44ede88c72506cbd8c518cd49825be
d5a68b5b5bb2e2c643b951ea64f1fe11
0039a7bb182a437b58e35ad209b3e0c5
5474aed406689785ca23a33b1c4a8abf
32a3970b8f70210d3678dcfaecf56dff
da12ebc2-1ec0-4a04-f35b-7f72da156d86
81bddd15-fe58-495c-b9c5-fd592c154889
f0eeb243-1e33-435d-9c83-0ab0e856aa6f
ff6fb8d354ac31f135a6bb5142ec8b37
59f7a053a9403a9f4e364c5be5b144fe
aa2e3e317050e98db002528037148319
1c28312dea6d300b556643de73d8f718
ae2c62bc4c16a57719d0939110c26ee8
5b3d311d-d2b0-4091-af46-6de7a90bacf8
50ead37e82f2abbf5dbddd6c210eb1b5
0a5418ad-2432-4660-bb00-99516298aa1c
5843698651982aea4399769e465a0b2f
7a9d28862f6f77f2e2b5ba1a7671d959
fb701075b3df41f1ee0d20b1e97ff554
96ac4afb124edb9e76e67650191dec9f
a3e3daf2967160f54d632b322e42c66a
274a158c-76a8-d044-05eb-0ed23f8d4625
20c4be2f-8b47-4484-868c-b14f50eb04d3
6b7e871c-c911-4e5a-a8ea-0d886a88e4c9
ddedd2d15a5d28b0865f80e710ad59d9
f8ebaaa03398d5ca51c0d8b7408fc41e
8455f098c8d4462e4b43df136613089e
afcad778-a44c-48d2-9b50-dbbaeff1e77a
a18dd3adae31863b40625f9e86ff784d
2f98eb2d-7292-b5e4-abf3-427379d01cc5
04313ed3-8c7e-4e2e-9771-a415cd2b4623
0f37aace835f686b3ecbeb682f5aa3ad
ac32b5ba-bda4-420f-ab8f-a6659ba984b8
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
7a83d67835b486e3ac1820fc457c8e8a
7ad15a4310b0b9cd330792fa428d9252
56f0bda0-de83-4b93-a36c-2d62de443ebf
344a79faaee23eea423e449f927bd5de
2e42feb9299e0859e3bdc9e5049bdb6e
2667d1e0772d4e7c7084476ace31cfd9
a63895cb-5406-4d81-b9b8-a220e61e017f
5c4c5b94fe4c40896443ccaf719793f3
d54025d62b6f5cffd2b306d7e7fdf21e
015d558b57f631225c3ba6a73660d4df
73fff104-20bd-40a7-b1ad-0a67d332a37b
93503494-17ff-4738-a820-312ad9911f36
24e368e1dc1e9f3b20ac81ba775bcb86
45be56a2032b4181a37cc878e3b462f5
7b5cb42d1d89b35230f31888cab9e751
2fe09035-e671-4804-aa44-575d1cd6f0c6
22d9c2f4c9c54cf6762358c289b5206d
b39d2b64-9d73-67c4-574b-47cb7ce11488
698fd2302293a5d82bb51eaf67262ced
ee6ddb2c0766c16cf6e4017e7e4e2f9c
b6577140159ea7940ff7fcb8d4f52743
d712837a4ce5d715a565912862c17bd2
ae619f12d7a41268db572298cc52d61e
878073eb-6a16-48f9-be14-f32f0cbf320e
c9d0bf0e50cc1ccaa65448dd77800d32
f0b695bb9560f47f5e579b0ab4c54d3f
0dd94069-1ce5-c744-7d5b-3e33d8754d65
f9d11a89c3bbdb1b8510d5989ebaed78
82acc782-9c97-4e87-b1f9-a3c5be3ad9e9
afabdce0-f8eb-42d2-85fe-fc77f2c37bf6
96097ebc52c216556acfacc298101e69
4803f566-2814-4abf-b6dc-296a4350897f
b4b0c86c-4a7d-4ba5-bbe1-51b17fa6dee9
4f394dde473bda836b1b63b28da04a2a
35becbc9f54e9276c6c7b069bd8aa419
27678d89-ab5c-4332-ab54-8281e9d8799c
d10c347c-e037-423b-a8d8-5420f636ed4e
021ab6e3997c2921b02429ac933407e6
87fc1dd1-c172-a234-633b-f47f380c2253
ac0c0879-a933-4bc4-9bbd-c650ab8b8ed1
ded41bb2553b218da786e9321ba32adb
67e6e8bd-2b85-4b11-a4b2-d8327961547f
40dd466e50ebad33e5e2f81a6258a3e3
5b39905e611e15c402410b2bd82d37e0
19e7acfdf8dba28faebc5fc80c4ff64e
a5cbb72277062bcd686a317480ed508d
b30c676d-0e21-4985-9ff5-e9b501d05c78
05675809b3dd2f88a8bdf976cf814661
add7492c-e71c-420f-9f02-881f068e955f
7478abf0ea9850c0100338b0cd59fc80
52bd54e97d8b7985b262a94814f26d90
fe33e6b5-25c7-4bba-a6d2-41761765a961
73a1d73d-f16f-4c19-9c13-8a62bb2da9d6
d299b246cfaef67237dd0422cb64ab9d
7f80dcbe-8680-2854-98fb-7b0136b0c19a
4f41f6bd08b141cb45fad4c2e459f78a
c969ca263d414ea10207b70f875a1353
e8006f66-1914-4159-b01d-a9a2fa8a4ec2
344193c12917b32818184ef367eaedc5
714844ad-1fa5-458b-9cbd-c838a8e94ed9
2f41f611-ae06-4e33-b0b3-76d5bb269984
26532f3eaaec9a055d6306b255f4fb17
d03b916b65f39c2fac7a37757b961341
e495f881-bf4e-42c7-98b1-c95793c5ba92
68c26d3b029969344bfadef36c414554
8e1fd940843d0f8ffc52ea446a046ca4
90d5ee480cba663cff534f6a10268710
d15a9f5a-ed82-4124-a603-a4be273c5556
f5a8e9b9-3e75-44e2-9126-c5b33d2578aa
e82a5afdcda418ee7749abdc94b7efdc
b27bcfd2-d56e-46c5-a367-c854925c9655
e0368b06c1b62d66a199cba6c1b31896
e2c634cc2e7e64fd43de0311deaa0ba5
3cbbecec6b719a2664ee7689946d4af5
04a8878e-c929-4519-82e2-566e5d44bd57
6d29945526ad7239eb935e4a6b9a0563
e761c5081647ff9049fd33542ebcffb0
a688493f98fe45c1459be862f91e652e
f236913873b3ab645ef5ce0a2a57e9de
f34deae78967532c788e68ba4f7782b7
c55008ce93b5f52c44d4df9c364685d0
7a795c51348e288fd9ff0fed4abc1add
57ad929bdc48df6a5a6855fbb7cd8d18
f9405710-d23e-4a35-8207-f9007a586cfe
b5aa29bd77f2df213c1305e92f52ef45
c53a10c83581823ce2439c5f0a959f4f
72326291-ee48-4b23-a890-cd1a123bb70b
cc1bff192a06a7484249ff12956a5377
121c4c4f109572a95a8d42cd834bcefd
a1e2e1d241412363905f25fa66c7af53
f83d59c050787cf953addce7dc34eaff
575ef462-1589-42ec-941a-3002313393f2
3a0bc509-870e-4508-889f-34e5f62e9b2b
ff1ab22bf825daaac048769bc374478a
a5262f05-9658-4a36-8a69-fb821872cca0
e85485da-54c3-4906-8f19-3cef4116ff02
086c4441-b0e1-4f4f-a31d-138f58174fe6
da72108e-5d14-4cf7-8ee4-24f386b2548a
7d80cf8e81b2bb92d2708985e1dca0f0
ae230ee8-d503-418b-b6cc-93c8ee6dc087
2fda30f09d8143be08710e2d10e1879e
5d52e123c1d67c374565da4647fada1a
aa26f84044f300f3a0ace571d4d81639
35603df39ba58142416fe2712ab72d59
b0da7921971a4018c2cc69b9ca7bd87b
da035486db686a8acb316fd304db60f6
982a69fe-5163-408d-8285-5d13a302b1c1
b928cfb6de452732bce7a5753f68fbae
ea1ad15d-c3eb-45c2-8a0d-ee63d17ba6b1
e22d34dd812e9a689e27939d9d7d91d9
f03c6fd0b68e587c62ad79bf2af156d9
bea536d186cfaf72895ec86de6268499
5eb9576032605f6f29925fc4304d949b
67a5915a-57f6-4765-b289-8c81853cbb59
3e98a520-7ab4-4c22-b3f0-3eeca3449bd8
771e6fab241349b754cef3219705da6a
ed03c0ea3ea2031a9d397f1e2b6fdfb6
c66d5a2ec4c57a814cf381abe89a4f60
772479ec-60f4-4996-8860-48165e18ea55
4f71689cbabedbcc27b49edce2b9b637
0261074ef00677dfd321bd39be99e3f4
8e5283fa-55ed-4040-9835-e0d0fba5b0be
243ce5b6-b29d-4911-a2ea-14aa129be00a
4D47F828-40D8-43B7-9E34-98FF55E4B0AD
93cc9bab-12a9-98b4-488b-ba93a26eddba
5c2659d4-48f3-16c4-ed83-2fefbad37066
1e98e827-dafa-426d-8f25-bfc0ed9b24a7
37bb2286-7272-470d-ae5a-8bad2b58551f
985ed089-8e38-4aa6-9e5a-00b770fe3e94
582033b28edfa068dd81423900fd0fc9
70da7cc6-e3f6-2e14-ceeb-b68e2e74bf77
28ca921e3d1ea43b9d6bf8fa825c6ab6
fa08306ca95264b8486261af0a8c6743
b091caf6411b40d0e22ab0100a547716
8d391a83-3158-4de5-8f9c-7346e35fbda5
c6c75474-090d-4ed0-813e-c77d3dae9e33
6496ded8dde74529adb60f48c561b171
a48ccc8a51988a6f12a32d49202ed1b7
9a6fb05e-e3da-8404-ed03-8c84879d0347
08930b423b99af4bd89538089a0c4cf9
1b2f455e430a6cdcabd35600978b9644
45caadb4-6de8-4466-9680-313f1a692594
e2a14de26b322a2df3fb7453d418a01a
f060f41b47119804d8fda93d8d4c447a
a2c5a024a9b67ada309b862fb3120992
78c68045-eba1-40f3-bf5e-52bc7f9ed797
f7b64fff7075f8b6a0b8be794fa28432
e72a3c5a54b547fc5c8c4ab29043e94e
323dfc4e81593721652d239e92b53bda
7de6015c45da0bd41802e5ae8cd81a16
94a8c213-e611-421c-b44b-b8b65fbdb278
e90951ef0488043e9dd11af371c2b35a
3008400039c483c496f4ad820242c447
2b1428e9062934a388132007a5132f94
26b79f30-37f1-445b-9d17-688c5c531448
bcf11ecb064d7bef61ca006f5c92e107
1801931d-1cb0-499c-9333-525d4986f596
b61c595f-60fa-43ec-8abe-7a4e281dc0e3
ea96043f0ef6a917d9e86a9b04a79295
fc16ab538caecb60ed7a96267b64f9e2
8084d54aa73def05c2ca4b0fc7a87a9c
375671fb-9551-4848-817c-8269eeb651b3
0c706461f4a616462fee0db920764aef
7f9cace07a272ec95047e4ce1fe6a16e
a0da46f5-242c-42d2-ad18-44e5abe118c3
977c1f8c477549aeb7238727fd4ecc62
ee5b396c314d52376001870f5df326c0
4be1d028-966d-4e40-9074-c783889e908c
5a85f9dc82eb8fa4eed9d46e35b1bdb4
fa3124c180a2770e7e177956dd79673b
4063c2f126c6605360497cf367b7c0bd
fc65bd1c-f4d3-4c81-a29e-708e184cf2a8
470fa2b4ae81cd56ecbcda9735803434cec591fa
53d48a31554597ddba69dc3a9aa2c429
f9624e7a5e648c6d84f9ebf48e8ae0c3
4c96be8e-9a26-40a7-8dbb-00f59314e7de
bd9d4145e4aea9193cac395f8d120eda
a1213fc41c1494c6b09adde6e5f834ee
bc53e18534385a6825830fdc29d66100
6809aea9-50d2-4e40-8f5b-400bb0b8a45f
1b2e0de7c255b31cee9cf12101188f8a
d84c6f7bbac3e117b8e2cfe7984566ee
7adeaa103347e15187c0b6945b6e443a
bc3caa52-e57c-4eb3-a609-ed7310564517
56ad1d970c396129621c30a0b8754762
200c4b26fb31cd4904956d6ca96fddd5
d0b5440d23604ed09951f0ced79d1252
89bc462266d4ba7b5478ee1cdc31c03c
1385fe74-06ad-496f-933e-c1785e3d7947
2e6d8087-3f80-482e-b690-cce969fc2719
63580f03a1f9bba1dc15d9de8768ab99
10b3fc63-28eb-4f7e-b8de-7579cd609cf5
7477b527491361e294cbe7312d79e89f
9fb9ae81-e7fb-49b2-b7f8-dfef4e09e3f4
c66f2ba2483af73b0c92c48e4158321b
4aa118a1-f512-a634-728b-effe7c6580d1
8c9f5e52-b3a5-471c-99e0-b28a477f7168
132de1c1-3920-af04-8f53-9d0feb8b3934
01731c4b6c0460fc48a8fdb68166b4a3
2cd341d7-1c8d-4592-8e44-9a44f106aae7
3f93b6df487d1596c449cf6ab0366c81
988e5652c01bdc93afe08c3ac6a4d3fe
31a256b2acdff02a3267aac40ec20e24
ac46159c-df13-7f94-327b-691eeb3869eb
670b4c22-d92e-4577-a582-f42a59a0ef08
36b00339ae42e9c79f114afbae0857ff
db2ba3ab93d52c5583c3560a8ac41f6d
951d78505cf207fd3c8f68543777b00a
ce188433-a77e-6354-cb63-a9a9c127e029
0e68131e78d4637f687b605142d04d31
20bdb8ef-109f-4945-a335-cb92b6ae29e2
98e36b9bc2d45ba50bc26f7edcf06247
4a5e238f-4bae-48d5-84d7-dd2b0e919ab5
6ab558840deb0588e865595e668c706
d49d72af4f0e86ca3ae43894f342b315
7ebb4ea55eb79b8ad1e0b89c845de748
7c6d33476e28381138b9ffe5d719e6ed
f4a3a5a46de0c64c24af27fce372f695
be897636b8b5f0fdfee6b36679cb43fc
7e90b511a112161dc02f30f8a9645f03
19ccb734-dd21-4d93-bfdf-02bca31d8587
d59282f630990663eccc525cf6d0fd2c
a628521a531747f3f02b1f292a2fad14
32b620085c874670bb3ad5b9da189b99
d57823ae0bc7329710e68946d5504a96
021470b2-cf86-40c7-9267-f1c16a1f23dc
a11d0f6ce02119c83f9cca6e2fe361aa
fb81eeab3f495548df64ff333eda32fe
5bfd75c351398353ddc12160f27daf54
67817410-83d7-9fb4-40a3-b17ba899dda9
4624d310aeccd49fd1789b00a4a3496d
3cc11bba-9606-431d-ac10-970dd61acada
149a37cb776b6be167741e818c5ff799
8109d7b2862ebe00fdd6580b124d5d44
d0baa2387dd3a61cd577761516e8dfe6
f56733df-4553-48ed-83bc-74abcaebd025
6cb0066cc395343614d2f5fa3611b4f1
6nQyMV3weYJaLBEDRfhdAkj2XB2fUiJc
5e6416b3bdb6b6891ba500ce265672b5
99a37f041e777464355ddea7f227c44f
7a81cc83-a481-4bb0-b564-f623cdb9aece
b243c5fd-a23d-4ce2-9b3a-1529329e1590
9ae340623487aec16d7bb533ae466c63
857f34233a06a80f0ec785b1f8e9e1be
e20e3e46-8f07-42b4-88b7-e5a890578d1b
d085c321-807b-4aa7-be9e-4ada10fa5b1b
b1d99fca-9a07-45bb-8aba-c09685b10e8b
84edc8a6-a5a1-4d09-8cf9-21fd6cdcd20c
c06c8400-8e06-11e0-9cb6-0002a5d5c51b
27e00887-3892-461f-aab8-f93b668ae5f8
3ea175ec-b901-25d4-c0c3-e21573850acd
9b4f82a1-527b-4b52-b5dd-e0ac27577bd2
11155838b1baa04f3aa2864613795dca
8e6030bfa89c1dfa9f6831ca09d1128b
9048be32-e07d-4070-abca-94d191857bee
b5fd4a541f4c6705dfcee6eaddb62a53
cbb4914d-c748-47e6-bae2-dc2e847443fd
0eae5b7ed04390f41d36895010f1a51b
60fb583d8d97ee0b518651a0a0ca9702
aa3b5ef4c378bd411ac45260b1e98506
5ea3f4926947e01a47083d1299cb8a99
d4f69523d2fe42835e257518a9fcb719
e97640c1-e4fc-49cf-a537-682843ce96e9
7538c680-8441-47b4-ab44-2eb926fe11bd
735b0130-c17e-4cbf-9261-c2293516a961
181e1f9992f111d35d093cdcc069c805
a315debdfc0fc6db5d1344032138de2f
70904ddb99b8b68ddfc3856c98962695
85cc6421fbd5e471e8e045cbea8ad8e8
dbe8cf1a2ab931362b9d189f9257e201
ad72c5046ac24ab04321554a16f2cf3c
b297dc93d0092c8891fcc9dcbddff424
f86ec6ac22cb8ef415e7c41321d0fbd1
51cc7bbebba8e649aed65306a210a3b9
c83975c398627019e525226f3d9011c9
bb72967cf14882bac738bf33636f44be
588282eb-0b6e-4809-9e2f-329c2a536b8c
dc06ba479b5267dceb11b2fd7ab6cf94
31c6af21-a16b-4deb-8d1f-c8c98403bc90
d94db3cd-eb2d-4053-b0ae-bf19cc5a4675
5b5059ce-850e-41c5-8727-65aebb5b6926
a2c5915b-33fc-a164-10d3-43e9f27a0c7b
9d40ad12-aee0-4517-8af4-75bc003656b6
30140cf8-0af4-4e3d-be26-87e41b8090e1
76acd9d6aaf0e6ea3d8014344daf115c
e4b4f8e9-354b-495c-93b6-2f7694133b61
dc5fcf46a00af17e3353688a93d6eb87
0bc92405450b67866605799061633064
8bc942cf-a66c-4967-bac4-e390e3d5ad88
27f442d2-e082-4548-917c-46ed072babf5
67874771eebf93ebe382b418c4cd33c9
c3234a9497adfc8d91cd7d903c163244
c175b3b4-6f20-4667-ad77-84505d833415
55c6c9b365b9a49e9d33917405a3090b
04f78d3a6f925890a943e40390e4f9dd
3e158fb281b6f2cbf3f830e53d97b589
7f099d32-5268-471d-beba-00a7c1f4bf6e
b7cdef30eb6b3592da0c2d910160854a
6c77e6f224ec22e373b1b572e53e0fc1
180a4f60-1030-4935-b2df-6499e308524f
2c64f85466b9ab3e62107244a1f499d8
6e1f6943-5616-0194-ce43-367d33212042

安全提示信息 应用程序记录日志信息,不得记录敏感信息 

应用程序记录日志信息,不得记录敏感信息
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#logs

Files:
a3/d.java, line(s) 211
a8/c.java, line(s) 66
ae/b.java, line(s) 62,75,51
ae/c.java, line(s) 73,86,111,167,182,285,71,85,110,162,181,280,107,127,139,189,210,256
ae/g.java, line(s) 15,12,12
ae/k.java, line(s) 47,30,67
ag/b.java, line(s) 59
b9/d.java, line(s) 34,52,57,62,41,33,40,45,51,56,61,46
be/c0.java, line(s) 64,82,86,112,116,46
be/h0.java, line(s) 50,53,31
be/i.java, line(s) 116,165,172
be/l.java, line(s) 83,35,66,102,114,124,130,133,135,139
be/m.java, line(s) 41,108
be/m0.java, line(s) 49,51,45
be/p.java, line(s) 24
be/y.java, line(s) 48
c7/b.java, line(s) 42
c8/a.java, line(s) 21,29,38,46,54,62
cg/g.java, line(s) 244
cl0/C0542b.java, line(s) 834
com/airbnb/epoxy/k.java, line(s) 38
com/airbnb/mvrx/c.java, line(s) 194,136
com/amazonaws/logging/AndroidLog.java, line(s) 23,42,29,35,49,56
com/appeaser/sublimepickerlibrary/datepicker/DayPickerViewPager.java, line(s) 83
com/appeaser/sublimepickerlibrary/recurrencepicker/EventRecurrence.java, line(s) 233,265,543
com/appeaser/sublimepickerlibrary/recurrencepicker/RecurrenceOptionCreator.java, line(s) 423
com/appeaser/sublimepickerlibrary/timepicker/RadialTimePickerView.java, line(s) 933
com/appeaser/sublimepickerlibrary/timepicker/SublimeTimePicker.java, line(s) 321,605
com/contrarywind/view/WheelView.java, line(s) 416
com/github/mikephil/charting/charts/BarChart.java, line(s) 62
com/github/mikephil/charting/charts/BarLineChartBase.java, line(s) 262,266,566,572,687,728
com/github/mikephil/charting/charts/Chart.java, line(s) 331,458,532,536,632,852,540
com/github/mikephil/charting/charts/CombinedChart.java, line(s) 105
com/github/mikephil/charting/charts/HorizontalBarChart.java, line(s) 113,69,73
com/github/mikephil/charting/components/AxisBase.java, line(s) 52
com/github/mikephil/charting/data/ChartData.java, line(s) 54
com/github/mikephil/charting/data/LineDataSet.java, line(s) 177,185
com/github/mikephil/charting/data/PieEntry.java, line(s) 27,39
com/github/mikephil/charting/listener/BarLineChartTouchListener.java, line(s) 222
com/github/mikephil/charting/renderer/CombinedChartRenderer.java, line(s) 126
com/github/mikephil/charting/renderer/ScatterChartRenderer.java, line(s) 51
com/github/mikephil/charting/utils/FileUtils.java, line(s) 33,52,65,92,118,132,163,174,185
com/github/mikephil/charting/utils/Utils.java, line(s) 64,79,254
com/hbb20/a.java, line(s) 1434,1436,47
com/hbb20/e.java, line(s) 1035,1044,424,427,1199,1391
com/instacart/library/truetime/c.java, line(s) 10,16,22,28
com/twilio/audioswitch/android/ProductionLogger.java, line(s) 26,35,72,54
com/twilio/video/Logger.java, line(s) 43,102,49,108,55,114,90,120,96,126
com/twilio/voice/EventPublisher.java, line(s) 209
com/twilio/voice/Logger.java, line(s) 43,102,49,108,55,114,90,120,96,126
com/twilio/voice/Registration.java, line(s) 28,47,67
com/ui/notification/ui/notice/list/ProgressCircle.java, line(s) 173,177,179,210,214
com/ui/rtc/ui/rtc/widget/RtcWidgetConnecting.java, line(s) 129,149,160
com/ui/uidaccess/ui/base/widget/WireView.java, line(s) 382,408,493
com/uum/data/models/notification/message/NoticeDetail.java, line(s) 861
com/uum/data/models/permission/DaySchedule.java, line(s) 88,132
com/uum/identification/ui/register/read/batch/b0.java, line(s) 152
com/uum/library/base/benefit/BenefitHandler.java, line(s) 33,105
com/wang/avi/AVLoadingIndicatorView.java, line(s) 364
com/wdullaer/materialdatetimepicker/date/i.java, line(s) 109,121,108,120
com/wdullaer/materialdatetimepicker/time/RadialPickerLayout.java, line(s) 258
com/wdullaer/materialdatetimepicker/time/c.java, line(s) 96,106
com/wdullaer/materialdatetimepicker/time/d.java, line(s) 127,136
com/wireguard/android/backend/GoBackend.java, line(s) 45,53,71,74,173,248,140,153,157,180,194
com/yalantis/ucrop/UCropActivity.java, line(s) 544
com/yalantis/ucrop/task/BitmapCropTask.java, line(s) 154,121
com/yalantis/ucrop/task/BitmapLoadTask.java, line(s) 72,126,132,139,170,173
com/yalantis/ucrop/util/BitmapLoadUtils.java, line(s) 54,102,116
com/yalantis/ucrop/util/EglUtils.java, line(s) 75
com/yalantis/ucrop/util/FileUtils.java, line(s) 78
com/yalantis/ucrop/util/ImageHeaderParser.java, line(s) 127,177,187,199,211,216,229,234,241,254,261,268,284,300,304,309,318,321,326,339,350,353,364,176,186,198,210,215,228,233,283,299,303,308,317,320,325
com/yalantis/ucrop/view/TransformImageView.java, line(s) 127,182,212,229
d9/d.java, line(s) 54,95,96,55
d9/j.java, line(s) 57,98,99,58
de/blinkt/openvpn/api/ConfirmDialog.java, line(s) 137
de/blinkt/openvpn/core/OpenVPNService.java, line(s) 185
de/blinkt/openvpn/core/OpenVpnManagementThread.java, line(s) 377,384,391,398,405,240
de/blinkt/openvpn/core/PRNGFixes.java, line(s) 96
de/blinkt/openvpn/core/StatusListener.java, line(s) 124,128,120,132,130
de/c0.java, line(s) 38
df0/d.java, line(s) 60,87
di/m.java, line(s) 130
dm/b.java, line(s) 13,19,33,44
e0/a0.java, line(s) 287,524
ee/a.java, line(s) 18
ee/a1.java, line(s) 34
ee/c.java, line(s) 160,178,331,337,341,347
ee/c0.java, line(s) 89,92,95,98,101,104,112,115,118,121,154,162
ee/c1.java, line(s) 37,55
ee/f0.java, line(s) 27
ee/j.java, line(s) 27,33,39,22,45,51
ee/m1.java, line(s) 53
ee/v0.java, line(s) 30
ee/y0.java, line(s) 100
ee/z0.java, line(s) 26
f4/m.java, line(s) 28,43,38,33
f6/a.java, line(s) 187,223,267,269,63,70,72,78,209,211,217,220,256,36,66,74,81,93,101,112,176,190
f6/b.java, line(s) 57,68,70,110,152,174,221,223,241,257,292,304,308,310,315,162,178,193,217,225,234,300
f70/d.java, line(s) 488
f80/h0.java, line(s) 117,140,146
f9/b.java, line(s) 20
fa/b.java, line(s) 36,46,68,77
ff/a.java, line(s) 67,71
fo0/g.java, line(s) 39,116,154
fu/b.java, line(s) 13,23
fu/f.java, line(s) 40,46
g0/d.java, line(s) 141
g2/j0.java, line(s) 178
gb0/f.java, line(s) 19,26,33,41,55,12,49
gf/a.java, line(s) 105,174,186,256,199,271
gf0/b.java, line(s) 14
gj/a.java, line(s) 306
gl/a.java, line(s) 16,17,39
gp0/b.java, line(s) 129,133,137,143,141,145
h9/a.java, line(s) 55,56
hm/a.java, line(s) 37,43
i6/a.java, line(s) 104
im/a.java, line(s) 11,17
im/b.java, line(s) 18,29,40
io/agora/rtc/gdp/EglCore.java, line(s) 95,188,193,50,45,77
io/agora/rtc/gdp/EglSurfaceBase.java, line(s) 87,108
io/agora/rtc/gdp/GDPAndroid.java, line(s) 111,179,186,282,287
io/agora/rtc/gdp/GlUtil.java, line(s) 30,73,85,86,101,105,111,112,113
io/agora/rtc/gl/EglBase14.java, line(s) 139
io/agora/rtc/gl/EglRenderer.java, line(s) 145
io/agora/rtc/gl/GlShader.java, line(s) 77,30,48
io/agora/rtc/internal/Connectivity.java, line(s) 29
io/agora/rtc/mediaio/AgoraBufferedCamera2.java, line(s) 95,100,234,283,343,347
io/agora/rtc/mediaio/AgoraSurfaceView.java, line(s) 117
io/agora/rtc/mediaio/AgoraTextureView.java, line(s) 110
io/agora/rtc/mediaio/BaseVideoRenderer.java, line(s) 154,213
io/agora/rtc/mediaio/SurfaceTextureHelper.java, line(s) 129,181,218,283,55,115,248,267,319
io/agora/rtc/mediaio/VideoFrameConsumerImpl.java, line(s) 21,30,38,58
io/agora/rtc/utils/YuvUtils.java, line(s) 74,90,107,122
io/agora/rtc/video/TextureRenderer.java, line(s) 84
io/agora/rtc/video/ViEAndroidGLES20.java, line(s) 73,244
io/agora/rtc/video/ViETextureView.java, line(s) 237
io/agora/rtc/video/ViETextureViewWrapper.java, line(s) 231
io/agora/rtc/video/VideoCaptureCamera.java, line(s) 167
jg/i.java, line(s) 30,21,37,44,29,36,43,50,51,57,58
jo0/b.java, line(s) 83,154
jx/h.java, line(s) 30,40,54
k0/b.java, line(s) 68,93
k6/b.java, line(s) 833
k8/b.java, line(s) 283
ke/f.java, line(s) 17
ke/p.java, line(s) 56,64,37,46
kk/a.java, line(s) 71
l3/e.java, line(s) 142
l8/d.java, line(s) 76,103,75,102
lk/a.java, line(s) 19,22,38
m1/g.java, line(s) 69
m1/w.java, line(s) 29
m6/d.java, line(s) 209
m8/a.java, line(s) 44,43
me/yokeyword/fragmentation/exception/AfterSaveStateTransactionWarning.java, line(s) 8
me/zhanghai/android/materialprogressbar/BaseProgressLayerDrawable.java, line(s) 69
me/zhanghai/android/materialprogressbar/MaterialProgressBar.java, line(s) 221,225,343
me0/a.java, line(s) 42
mk/e.java, line(s) 28,41,54
n6/a.java, line(s) 96
na/a.java, line(s) 84,87,88
net/sf/jmimemagic/Magic.java, line(s) 94,99,107
net/sqlcipher/AbstractCursor.java, line(s) 139
net/sqlcipher/DatabaseUtils.java, line(s) 117,158,599,610
net/sqlcipher/DefaultDatabaseErrorHandler.java, line(s) 14,24,26,30,18
net/sqlcipher/database/SQLiteCompiledSql.java, line(s) 50,62,75,86
net/sqlcipher/database/SQLiteContentHelper.java, line(s) 25
net/sqlcipher/database/SQLiteDatabase.java, line(s) 180,1107,1118,1484,1492
net/sqlcipher/database/SQLiteDebug.java, line(s) 7,8,9,10,11,12
net/sqlcipher/database/SQLiteOpenHelper.java, line(s) 120,139
net/sqlcipher/database/SQLiteProgram.java, line(s) 45,51
net/sqlcipher/database/SQLiteQuery.java, line(s) 115
net/sqlcipher/database/SQLiteQueryBuilder.java, line(s) 222,221
net/sqlcipher/database/SqliteWrapper.java, line(s) 29,39,53,63,73
no/nordicsemi/android/ble/BleManagerHandler.java, line(s) 374,401,593,607,668,763,796,917,988,1209,368,662,757,1203,3023,3083
no/nordicsemi/android/ble/b6.java, line(s) 13
no/nordicsemi/android/ble/h6.java, line(s) 94,105,116
no/nordicsemi/android/ble/q5.java, line(s) 10
no/nordicsemi/android/ble/s6.java, line(s) 25
no/nordicsemi/android/ble/u5.java, line(s) 22
no/nordicsemi/android/ble/u6.java, line(s) 13
no/nordicsemi/android/ble/x5.java, line(s) 17,28
no/nordicsemi/android/ble/x6.java, line(s) 29
no/nordicsemi/android/ble/z5.java, line(s) 21
o8/c.java, line(s) 108,107
o8/e.java, line(s) 64,63
on0/f.java, line(s) 68
p3/c.java, line(s) 110
p6/b.java, line(s) 31
pp0/a.java, line(s) 75,78,81,84,87,90,92,95,113,117,125,128,139,145,148,152,162,165,171,181,189,194,198,202,204,212,220,224,228,236,244,248,252,256,260,268,272,280,288,296,298,302,306,314,320,323,326,330,333,335,67,216
q6/o0.java, line(s) 44
q70/c.java, line(s) 23
q8/i.java, line(s) 110,150,111,151
q8/j.java, line(s) 109,154,168,180,72,108,118,143,153,167,179,200,207,78,119,201,208,144
q9/f.java, line(s) 14,20,30,41,52
qb/a.java, line(s) 15,22,29,14,21,28,42,43,49,50
r7/e.java, line(s) 33,27
r70/f.java, line(s) 106,125,135,228,240,250,321
r8/e.java, line(s) 48,54,82,92,49,83,55,95
r8/i.java, line(s) 123,107
r80/g.java, line(s) 38,44,49,58
razerdp/basepopup/c.java, line(s) 823
razerdp/basepopup/h.java, line(s) 155
rg/g.java, line(s) 28,35,38,47,85
rg/o.java, line(s) 52
rh/b.java, line(s) 57,74
rl/a.java, line(s) 328,342,120,133,138,177,204,316
s2/o.java, line(s) 259,290
s8/a.java, line(s) 272,269
sh/c.java, line(s) 93,96,118,126,127,147,149
sp0/a.java, line(s) 7,11,15
sy/g.java, line(s) 75,78,92
t8/c.java, line(s) 16,15
t8/d.java, line(s) 45,44
t8/t.java, line(s) 25,28
t8/u.java, line(s) 36,41,54,70,37,42,57,73
t8/v.java, line(s) 35,34
t80/b.java, line(s) 42,64
td/l.java, line(s) 23,29,37,43,49,57
te/q.java, line(s) 31
tj/b.java, line(s) 14,21,45,52
tk/o.java, line(s) 570
tm0/e.java, line(s) 53,53,73
tvi/webrtc/DefaultVideoEncoderFactory.java, line(s) 82,45,51,70,78,84,127,129
tx/a.java, line(s) 35,38
u6/a.java, line(s) 19
u7/r.java, line(s) 282
u70/g.java, line(s) 212,342,353
ug/f.java, line(s) 28,38,15,48,58,68
v3/b.java, line(s) 106,127,121
v8/i.java, line(s) 79,80
vj/c.java, line(s) 126,257
vl0/n.java, line(s) 288,312,282,317
vy/d.java, line(s) 10,16,22
w/s0.java, line(s) 134,136,140,144,149
w40/d.java, line(s) 469
wy/a.java, line(s) 538
xd/a.java, line(s) 110,150
xd/d.java, line(s) 23,37,46,56
xe/p.java, line(s) 24,32,37,43
yh0/AbstractC0418b.java, line(s) 12,22
yh0/C0289o.java, line(s) 441
yh0/C0422f.java, line(s) 39,45
yh0/C0447j0.java, line(s) 179
yn0/a.java, line(s) 12
ys/i.java, line(s) 99
z8/a.java, line(s) 80,86,93,102,81,87,94,103
z8/d.java, line(s) 20,21
z8/j.java, line(s) 38,41
ze0/d.java, line(s) 26
zf/d.java, line(s) 147,180

安全提示信息 此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板，因为其他应用程序可以访问它 

此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板，因为其他应用程序可以访问它
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04b-Mobile-App-Security-Testing.md#clipboard

Files:
aa0/g.java, line(s) 4,377
c90/j2.java, line(s) 7,442
com/uum/uidnetwork/ui/wifi/dashboard/guest/v.java, line(s) 5,854
p20/l.java, line(s) 4,20,21
tc0/f.java, line(s) 5,330
v50/j2.java, line(s) 7,441
w30/i.java, line(s) 4,22,34,23,35
w90/i.java, line(s) 4,41,42
yp/u.java, line(s) 4,21,22

安全提示信息 此应用程序使用SQL Cipher。SQLCipher为sqlite数据库文件提供256位AES加密 

此应用程序使用SQL Cipher。SQLCipher为sqlite数据库文件提供256位AES加密


Files:
com/ubnt/storage/database/ProtectDb.java, line(s) 36,13,14
net/sqlcipher/database/SupportHelper.java, line(s) 12,1

安全提示信息 应用与Firebase数据库通信 

该应用与位于 https://passport-bea20.firebaseio.com 的 Firebase 数据库进行通信

已通过安全项 此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击 

此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05g-Testing-Network-Communication.md#testing-custom-certificate-stores-and-certificate-pinning-mstg-network-4

Files:
hp0/w.java, line(s) 41,40,39,39
in0/a.java, line(s) 237,167,236,248,208,220,220,382
qp0/a.java, line(s) 127,123,129
sm0/d.java, line(s) 103,102,101
sm0/e.java, line(s) 127,117,126,134,125,125
sm0/j.java, line(s) 104,103,102,102
sm0/k.java, line(s) 230,218,229,228,228
zz/w.java, line(s) 37,36,35,35

已通过安全项 此应用程序可能具有Root检测功能 

此应用程序可能具有Root检测功能
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05j-Testing-Resiliency-Against-Reverse-Engineering.md#testing-root-detection-mstg-resilience-1

Files:
fl/b.java, line(s) 235
io/agora/rtc/video/VideoCapture.java, line(s) 209
jg/v.java, line(s) 24

重点安全关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (firebase-settings.crashlytics.com) 通信。 

{'ip': '180.163.150.34', 'country_short': 'CN', 'country_long': '中国', 'region': '上海', 'city': '上海', 'latitude': '31.224333', 'longitude': '121.468948'}

重点安全关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (pagead2.googlesyndication.com) 通信。 

{'ip': '180.163.151.38', 'country_short': 'CN', 'country_long': '中国', 'region': '上海', 'city': '上海', 'latitude': '31.224333', 'longitude': '121.468948'}

综合安全基线评分总结

应用图标

Identity v0.85.2

Android APK
51
综合安全评分
中风险