Potentially sensitive data was observed to be stored in UserDefaults, which is not adequate protection of sensitive information. For data of a sensitive nature, applications should leverage the Keychain. Likelihood: LOW Confidence: MEDIUM CWE: - CWE-311: Missing Encryption of Sensitive Data
OWASP: - A03:2017 - Sensitive Data Exposure
- A04:2021 - Insecure Design