keychain-device-sync
keychain-device-sync
The application was observed to store keychain items with the synchronization type
Likelihood: LOW
Confidence: MEDIUM
CWE:
- C
- W
- E
- -
- 2
- 7
- 2
- :
-
- L
- e
- a
- s
- t
-
- P
- r
- i
- v
- i
- l
- e
- g
- e
-
- V
- i
- o
- l
- a
- t
- i
- o
- n
kSecAttrSynchronizableAny
meaning that the data will be synced to all of the users other authenticated iOS, iPadOS, and MacOS devices. Unless necessary, the application should avoid over-distribution of sensitive data, as this increases the attack surface for which an attacker may gain access to the data. Likelihood: LOW
Confidence: MEDIUM
CWE:
- C
- W
- E
- -
- 2
- 7
- 2
- :
-
- L
- e
- a
- s
- t
-
- P
- r
- i
- v
- i
- l
- e
- g
- e
-
- V
- i
- o
- l
- a
- t
- i
- o
- n