Column
Insecure: Icon
indicates the version is insecure, otherwise
Column
CryptoMisuse: Icon
indicates the version has cryptographic API misuse, otherwise
Version |
Insecure |
CryptoMisuse |
Rule name |
Method |
Statement |
Details |
2.4.4 |
|
|
|
|
|
|
2.4.5 |
|
|
|
|
|
|
2.4.6 |
|
|
|
|
|
|
2.4.7 |
|
|
|
|
|
|
2.6.0 |
|
|
|
|
|
|
2.6.1 |
|
|
|
|
|
|
2.6.2 |
|
|
|
|
|
|
2.6.3 |
|
|
|
|
|
|
2.6.4 |
|
|
|
|
|
|
2.6.5 |
|
|
|
|
|
|
2.6.6 |
|
|
|
|
|
|
2.6.7 |
|
|
|
|
|
|
2.6.8 |
|
|
SecretKeySpec |
com.amazonaws.cognito.clientcontext.util.SignatureGenerator.getSignature(Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;)Ljava/lang/String; |
specialinvoke $r7.<javax.crypto.spec.SecretKeySpec: void <init>(byte[],java.lang.String)>($r9, varReplacer87) |
First parameter was not properly generated as prepared Key Material |
2.6.9 |
|
|
SecretKeySpec |
com.amazonaws.cognito.clientcontext.util.SignatureGenerator.getSignature(Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;)Ljava/lang/String; |
specialinvoke $r7.<javax.crypto.spec.SecretKeySpec: void <init>(byte[],java.lang.String)>($r9, varReplacer76) |
First parameter was not properly generated as prepared Key Material |
2.6.10 |
|
|
SecretKeySpec |
com.amazonaws.cognito.clientcontext.util.SignatureGenerator.getSignature(Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;)Ljava/lang/String; |
specialinvoke $r7.<javax.crypto.spec.SecretKeySpec: void <init>(byte[],java.lang.String)>($r9, varReplacer77) |
First parameter was not properly generated as prepared Key Material |
2.6.11 |
|
|
SecretKeySpec |
com.amazonaws.cognito.clientcontext.util.SignatureGenerator.getSignature(Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;)Ljava/lang/String; |
specialinvoke $r7.<javax.crypto.spec.SecretKeySpec: void <init>(byte[],java.lang.String)>($r9, varReplacer124) |
First parameter was not properly generated as prepared Key Material |
2.6.12 |
|
|
SecretKeySpec |
com.amazonaws.cognito.clientcontext.util.SignatureGenerator.getSignature(Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;)Ljava/lang/String; |
specialinvoke $r7.<javax.crypto.spec.SecretKeySpec: void <init>(byte[],java.lang.String)>($r9, varReplacer158) |
First parameter was not properly generated as prepared Key Material |
2.6.13 |
|
|
SecretKeySpec |
com.amazonaws.cognito.clientcontext.util.SignatureGenerator.getSignature(Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;)Ljava/lang/String; |
specialinvoke $r7.<javax.crypto.spec.SecretKeySpec: void <init>(byte[],java.lang.String)>($r9, varReplacer75) |
First parameter was not properly generated as prepared Key Material |
2.6.14 |
|
|
|
|
|
|
2.6.15 |
|
|
|
|
|
|
2.6.16 |
|
|
|
|
|
|
2.6.17 |
|
|
|
|
|
|
2.6.18 |
|
|
|
|
|
|
2.6.19 |
|
|
|
|
|
|
2.6.20 |
|
|
|
|
|
|
2.6.21 |
|
|
|
|
|
|
2.6.22 |
|
|
|
|
|
|
2.6.23 |
|
|
|
|
|
|
2.6.24 |
|
|
|
|
|
|
2.6.25 |
|
|
|
|
|
|
2.6.26 |
|
|
|
|
|
|
2.6.27 |
|
|
|
|
|
|
2.6.28 |
|
|
|
|
|
|
2.6.29 |
|
|
|
|
|
|
2.6.30 |
|
|
|
|
|
|
2.6.31 |
|
|
|
|
|
|
2.7.0 |
|
|
|
|
|
|
2.7.1 |
|
|
|
|
|
|
2.7.2 |
|
|
|
|
|
|
2.7.3 |
|
|
|
|
|
|
2.7.4 |
|
|
|
|
|
|
2.7.5 |
|
|
|
|
|
|
2.7.6 |
|
|
|
|
|
|
2.7.7 |
|
|
|
|
|
|
2.8.0 |
|
|
|
|
|
|
2.8.1 |
|
|
|
|
|
|
2.8.2 |
|
|
|
|
|
|
2.8.3 |
|
|
|
|
|
|
2.8.4 |
|
|
|
|
|
|
2.8.5 |
|
|
|
|
|
|
2.9.0 |
|
|
|
|
|
|