secDevLabs
secDevLabs copied to clipboard
Games irados ( correção )
This solution refers to which of the apps?
A9 - Games Irados
What did you do to mitigate the vulnerability?
The app presented a log without objectivity, with shallow information when informing about coupons or when logging in. To change this situation, more detailed information was added, such as who made the request and what happened, so it will be clearer to discover possible attacks, based on the log description.
Note: The “id do usuário” field was used because the user name would be sensitive information exposed in the log. The information that is covered is the device's IP.