diff --git a/mobsf/StaticAnalyzer/views/android/cert_analysis.py b/mobsf/StaticAnalyzer/views/android/cert_analysis.py index bb2dce54..b65304fc 100755 --- a/mobsf/StaticAnalyzer/views/android/cert_analysis.py +++ b/mobsf/StaticAnalyzer/views/android/cert_analysis.py @@ -131,7 +131,10 @@ def cert_info(app_dir, app_file): status, 'Application is signed with v1 signature scheme, ' 'making it vulnerable to Janus vulnerability on ' - 'Android <7.0')) + 'Android 5.0-8.0, if signed only with v1 signature' + ' scheme. Applications running on Android 5.0-7.0' + ' signed with v1, and v2/v3 ' + 'scheme is also vulnerable.')) if re.findall(r'CN=Android Debug', cert_info): findings.append(( 'bad',