Sensitive Information Exposure in Photo,Video Locker-Calculator Android App

CVE-2017-16835 · MEDIUM Severity

AV:N/AC:L/AU:N/C:P/I:N/A:N

The "Photo,Video Locker-Calculator" application 12.0 for Android has android:allowBackup="true" in AndroidManifest.xml, which allows attackers to obtain sensitive cleartext information via an "adb backup '-f smart.calculator.gallerylock'" command.

Learn more about our Cis Benchmark Audit For Google Android.