HexBrain

Whisper · Report #57918

Insecure Local Data Storage : Application stores data using a binary sqlite database

Validstatus
$50bounty
8upvotes
3 Mar 2017disclosed

How it was found

Android provides several options for developers to save persistent application data. The local DB should store data depending on whether the data should be private to your application or accessible to other applications and users. In any case, sensible data always have to be encrypted to avoid privacy violation. Linkedin App keeps user data in a SQLite database

w.db

OWASP: Insecure Storage

OWASP: Insecure Data Storage

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original