Reference detail
CWE-312 — Cleartext Storage of Sensitive Information
Recorded findings mapped to this weakness category. Review the detection and its context in the app report.
Mapped findings are review signals. Interpret each app’s build, scan date and coverage before drawing a conclusion. Historical verification describes only its recorded scan time.
Mapped checks & review guidance (3)
android:allowBackup="true"
Backup is on by default on Android; this manifest states it explicitly. If the app stores sensitive local data, define dataExtractionRules/fullBackupContent to exclude it, or set android:allowBackup=false.
Browse this categoryDatabase connection string with credentials
Remove the embedded username:password, rotate the credential, and authenticate to the endpoint with short-lived per-user tokens instead.
Browse this categoryBIP-39 wallet seed phrase
A mnemonic seed phrase must never be embedded — any holder controls the wallet. Move funds to a new wallet immediately and never bundle key material.
Browse this categoryApps with mapped findings
2556 matching apps · Counts below include only this page’s mapped finding types.
ABB Code of Conduct
com.abb.codeofconductBuild 4.2 · 2026-09-02 11:34 UTC1 matching category · 1 matching occurrence
Fit In Twenty
com.p4qehhba87xf.p8mnpop2nappBuild 3.11.31 · 2026-09-02 10:50 UTC1 matching category · 1 matching occurrence
Breaker Fun 2: Zombie Brick
com.bricksbreaker.crusher.zombie.decorBuild 2.9.1 · 2026-09-02 10:47 UTC1 matching category · 1 matching occurrence
Jewelry Photo Editor for Girl
com.goshi.jewellery.bridalmakeup.indianjewelleryBuild 8.4.9 · 2026-09-02 10:35 UTC1 matching category · 1 matching occurrence
StretchOut
com.youloft.google.stretchBuild 1.1.2 · 2026-09-02 10:18 UTC1 matching category · 1 matching occurrence
com.reddit.frontpageBuild 2026.35.0 · 2026-09-02 10:09 UTC1 matching category · 1 matching occurrence