SSL/TLS Pinning Detected
Description
SSL/TLS certificate pinning has been detected in the mobile application for one or more backend connections. This mechanism ensures that the application only trusts specific certificates or public keys when establishing secure connections, helping protect against Man-in-the-Middle (MITM) attacks.
Recommendation
This entry is informative, no recommendations applicable.
Detecte este problema con Ostorlab
Ostorlab busca este problema en aplicaciones Android e iOS.
Analice su app gratisLinks
- OWASP Mobile Application Security: Android Certificate Pinning
- OWASP Mobile Top 10: Insecure Communication
- Android Network Security Configuration: Pin certificates
- Apple App Transport Security
- Apple App Pinned Domains
Standards
- OWASP_MOBILE_TOP_10:
- M5_2024