andrejacobs-unily issues

Repositories
Issues
Comments

Results 1 issues of


                                            andrejacobs-unily

Weak Keychain Protection Class - AccessibleAlways

Hi, MSIDKeychainUtil.m line 74 stores the key "SDK.ObjC.teamIDHint" using kSecAttrAccessibleAlways. https://github.com/AzureAD/microsoft-authentication-library-common-for-objc/blob/afc23292d4eb977bda843474a6ae35e40f345e1d/IdentityCore/src/util/ios/MSIDKeychainUtil.m#L74 We received the following from a 3rd party security company regarding a value being stored in the keychain. ---...