CoPilot GPS - Navigation - Base64 encoded String, Certificates or keys found, Corrupted files vulnerabilities

Name

Vendor

Link

Store

Version

• CRITICAL
Base64 encoded String

Base64 encoded string could include authentication credentials.

• MEDIUM
SD-card access

SD-cards and other external storages have 'worldwide read' policy.

WebView JavaScript enabled

WebView 'setJavaScriptEnabled(true)' could be exploited during cross-site scripting attacks.

Exported components

Other applications could access the interfaces.

WebView files access

Control of WebView context allows to access local files.

Certificates or keys found

These credentials could be used for authentication.

• NOTICE
Corrupted files

Can't parse these files. Corrupted? Check manually.

Suspicious files

Are you sure these files should be here?

Unsafe deleting

All items deleted with 'file.delete()' could be recovered.

External URLs

Where do they point?

References