-
Notifications
You must be signed in to change notification settings - Fork 1
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
add DEPRECATED_TARGET_API_VERSION to KB
- Loading branch information
Showing
3 changed files
with
30 additions
and
0 deletions.
There are no files selected for viewing
4 changes: 4 additions & 0 deletions
4
MOBILE_CLIENT/ANDROID/_LOW/DEPRECATED_TARGET_API_VERSION/description.md
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,4 @@ | ||
The `android:targetSdkVersion` attribute specifies the minimum Android API level required by the application. Setting a low `targetSdkVersion` may allow the application to run on older Android versions but could expose users to security vulnerabilities. | ||
|
||
Here is a link with the deprecation notice: | ||
https://support.google.com/googleplay/android-developer/answer/11926878?hl=en |
22 changes: 22 additions & 0 deletions
22
MOBILE_CLIENT/ANDROID/_LOW/DEPRECATED_TARGET_API_VERSION/meta.json
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,22 @@ | ||
{ | ||
"risk_rating": "low", | ||
"short_description": "Application sets the targetSdkVersion attribute to allow usage of older versions of Android which may expose users to security vulnerabilities.", | ||
"references": { | ||
"Android API Levels": "https://developer.android.com/guide/topics/manifest/uses-sdk-element#min", | ||
"Target API level deprecation notice" : "https://support.google.com/googleplay/android-developer/answer/11926878?hl=en" | ||
}, | ||
"title": "Deprecated Target API Version", | ||
"cvss_v3_vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", | ||
"privacy_issue": false, | ||
"security_issue": true, | ||
"categories": { | ||
"GDPR": [ | ||
"ART_24", | ||
"ART_32" | ||
], | ||
"PCI_STANDARDS":[ | ||
"REQ_6_2", | ||
"REQ_6_3" | ||
] | ||
} | ||
} |
4 changes: 4 additions & 0 deletions
4
MOBILE_CLIENT/ANDROID/_LOW/DEPRECATED_TARGET_API_VERSION/recommendation.md
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,4 @@ | ||
Consider setting the `android:targetSdkVersion` attribute to a value that corresponds to a more recent Android version. This can help ensure that the application benefits from security improvements and reduces the risk of vulnerabilities associated with older Android releases. | ||
|
||
Here is a link with the deprecation notice: | ||
https://support.google.com/googleplay/android-developer/answer/11926878?hl=en |