CWE-927

Use of Implicit Intent for Sensitive Communication

Medium

Description

The Android application uses an implicit intent for transmitting sensitive data to other applications.

Potential Impact

Confidentiality: Read Application Data
Integrity: Varies by Context

How to Fix

Implementation

If the application only requires communication with its own components, then the destination is always known, and an explicit intent could be used.

Detection Methods

Automated Static Analysis: Automated static analysis, commonly referred to as Static Application Security Testing (SAST), can find some instances of this weakness by analyzing source code (or binary/compiled code) without havin...

Related Weaknesses

References

View on MITRE CWE Database →

Need Help Fixing This Vulnerability?

Our security experts can help you identify and remediate CWE-927 vulnerabilities in your codebase.

Get Security Assessment