diff --git a/MOBILE_CLIENT/ANDROID/_LOW/DEPRECATED_TARGET_API_VERSION/description.md b/MOBILE_CLIENT/ANDROID/_LOW/DEPRECATED_TARGET_API_VERSION/description.md new file mode 100644 index 00000000..ce23159e --- /dev/null +++ b/MOBILE_CLIENT/ANDROID/_LOW/DEPRECATED_TARGET_API_VERSION/description.md @@ -0,0 +1,4 @@ +The `android:targetSdkVersion` attribute specifies the minimum Android API level required by the application. Setting a low `targetSdkVersion` may allow the application to run on older Android versions but could expose users to security vulnerabilities. + +Here is a link with the deprecation notice: +https://support.google.com/googleplay/android-developer/answer/11926878?hl=en \ No newline at end of file diff --git a/MOBILE_CLIENT/ANDROID/_LOW/DEPRECATED_TARGET_API_VERSION/meta.json b/MOBILE_CLIENT/ANDROID/_LOW/DEPRECATED_TARGET_API_VERSION/meta.json new file mode 100644 index 00000000..d21cbf40 --- /dev/null +++ b/MOBILE_CLIENT/ANDROID/_LOW/DEPRECATED_TARGET_API_VERSION/meta.json @@ -0,0 +1,22 @@ +{ + "risk_rating": "low", + "short_description": "Application sets the targetSdkVersion attribute to allow usage of older versions of Android which may expose users to security vulnerabilities.", + "references": { + "Android API Levels": "https://developer.android.com/guide/topics/manifest/uses-sdk-element#min", + "Target API level deprecation notice" : "https://support.google.com/googleplay/android-developer/answer/11926878?hl=en" + }, + "title": "Deprecated Target API Version", + "cvss_v3_vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", + "privacy_issue": false, + "security_issue": true, + "categories": { + "GDPR": [ + "ART_24", + "ART_32" + ], + "PCI_STANDARDS":[ + "REQ_6_2", + "REQ_6_3" + ] + } +} \ No newline at end of file diff --git a/MOBILE_CLIENT/ANDROID/_LOW/DEPRECATED_TARGET_API_VERSION/recommendation.md b/MOBILE_CLIENT/ANDROID/_LOW/DEPRECATED_TARGET_API_VERSION/recommendation.md new file mode 100644 index 00000000..cb5d4a59 --- /dev/null +++ b/MOBILE_CLIENT/ANDROID/_LOW/DEPRECATED_TARGET_API_VERSION/recommendation.md @@ -0,0 +1,4 @@ +Consider setting the `android:targetSdkVersion` attribute to a value that corresponds to a more recent Android version. This can help ensure that the application benefits from security improvements and reduces the risk of vulnerabilities associated with older Android releases. + +Here is a link with the deprecation notice: +https://support.google.com/googleplay/android-developer/answer/11926878?hl=en \ No newline at end of file