Skip to content

CWE-489 - Leftover Debug Code

Description

The application contains leftover debug code that can be used by attackers to steal sensitive data or perform unintended actions. For example, an attacker can steal user credentials or perform a transaction without user consent.

Manifest Scanner Check

$ manifest-scanner -f /path/to/android-project -c CWE-489

References