Vulnerability: Lack Of Jailbreak Detection
Summary
Verida lacks jailbreak detection and easily opens the app on jailbroken devices which leads Rho users to compromise accounts and data without knowing them.
Severity:
LOW
Impact:
FULL ADMIN CONTROL – jailbreaking gives hackers full control to perform system-wide operations on a device – full stop. They can modify the IOS/Android, run scripts that grab data stored in shared areas of the file system, can even compromise non-shared areas (like your app sandbox).
DISABLE SECURITY DEFENSES – Once jailbroken, the hacker has compromised the IOS and gained administrative control over the device. This could make it impossible for users to use your app or for the hacker to present the user with false or malicious information.
AUTOMATE MALWARE – Jailbreaking also makes it easier for hackers to deliver, update, and automate malware attacks to achieve scale.
Remedy:
- Detect Jailbroken Device on APP start.
- If the device is jailbroken, the application cannot run properly:
Vulnerability: Lack Of Jailbreak Detection
Summary
Verida lacks jailbreak detection and easily opens the app on jailbroken devices which leads Rho users to compromise accounts and data without knowing them.
Severity:
LOW
Impact:
FULL ADMIN CONTROL – jailbreaking gives hackers full control to perform system-wide operations on a device – full stop. They can modify the IOS/Android, run scripts that grab data stored in shared areas of the file system, can even compromise non-shared areas (like your app sandbox).
DISABLE SECURITY DEFENSES – Once jailbroken, the hacker has compromised the IOS and gained administrative control over the device. This could make it impossible for users to use your app or for the hacker to present the user with false or malicious information.
AUTOMATE MALWARE – Jailbreaking also makes it easier for hackers to deliver, update, and automate malware attacks to achieve scale.
Remedy: