From 9463b74525952fb9c59e63f250de9b705c91cc4e Mon Sep 17 00:00:00 2001 From: Ajin Abraham Date: Wed, 1 Dec 2021 11:42:20 -0800 Subject: [PATCH] Janus Description updates (#1857) * Modify cert_analysis - Janus Updated the Janus Vulnerability to reflect the difference cases. Co-authored-by: Th30 --- mobsf/StaticAnalyzer/views/android/cert_analysis.py | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/mobsf/StaticAnalyzer/views/android/cert_analysis.py b/mobsf/StaticAnalyzer/views/android/cert_analysis.py index bb2dce54..b65304fc 100755 --- a/mobsf/StaticAnalyzer/views/android/cert_analysis.py +++ b/mobsf/StaticAnalyzer/views/android/cert_analysis.py @@ -131,7 +131,10 @@ def cert_info(app_dir, app_file): status, 'Application is signed with v1 signature scheme, ' 'making it vulnerable to Janus vulnerability on ' - 'Android <7.0')) + 'Android 5.0-8.0, if signed only with v1 signature' + ' scheme. Applications running on Android 5.0-7.0' + ' signed with v1, and v2/v3 ' + 'scheme is also vulnerable.')) if re.findall(r'CN=Android Debug', cert_info): findings.append(( 'bad',