Back to library list

com.clevertap.android__clevertap-android-sdk

Column Insecure: Icon yes indicates the version is insecure, otherwise no
Column CryptoMisuse: Icon yes indicates the version has cryptographic API misuse, otherwise no
Version Insecure CryptoMisuse Rule name Method Statement Details
2.0.4 no       no
2.0.5 no       no
2.0.8 no       no
2.0.9 no       no
2.0.10 no       no
2.1.1 no       no
2.1.2 no       no
2.1.3 no       no
2.2.0 no       no
3.0.0 no       no
3.1.0 no       no
3.1.1 no       no
3.1.2 no       no
3.1.4 no       no
3.1.6 no       no
3.1.7 no       no
3.1.8 no       no
3.1.9 no       no
3.1.10 no       no
3.2.0 no       yes SSLContext com.clevertap.android.sdk.SSLContextBuilder.build()Ljavax/net/ssl/SSLContext; r7 = staticinvoke <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String)>(varReplacer1802) First parameter (with value "TLS") should be any of {TLSv1, TLSv1.1, TLSv1.2}
- - yes SSLContext com.clevertap.android.sdk.SSLContextBuilder.build()Ljavax/net/ssl/SSLContext; virtualinvoke r7.<javax.net.ssl.SSLContext: void init(javax.net.ssl.KeyManager[],javax.net.ssl.TrustManager[],java.security.SecureRandom)>(varReplacer1808, $r20, varReplacer1808) First parameter was not properly generated as generated Key Manager
- - yes SSLContext com.clevertap.android.sdk.SSLContextBuilder.build()Ljavax/net/ssl/SSLContext; virtualinvoke r7.<javax.net.ssl.SSLContext: void init(javax.net.ssl.KeyManager[],javax.net.ssl.TrustManager[],java.security.SecureRandom)>(varReplacer1808, $r20, varReplacer1808) Second parameter was not properly generated as generated Trust Manager
3.3.0 no       yes SSLContext com.clevertap.android.sdk.SSLContextBuilder.build()Ljavax/net/ssl/SSLContext; r7 = staticinvoke <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String)>(varReplacer2263) First parameter (with value "TLS") should be any of {TLSv1, TLSv1.1, TLSv1.2}
- - yes SSLContext com.clevertap.android.sdk.SSLContextBuilder.build()Ljavax/net/ssl/SSLContext; virtualinvoke r7.<javax.net.ssl.SSLContext: void init(javax.net.ssl.KeyManager[],javax.net.ssl.TrustManager[],java.security.SecureRandom)>(varReplacer2255, $r20, varReplacer2255) First parameter was not properly generated as generated Key Manager
- - yes SSLContext com.clevertap.android.sdk.SSLContextBuilder.build()Ljavax/net/ssl/SSLContext; virtualinvoke r7.<javax.net.ssl.SSLContext: void init(javax.net.ssl.KeyManager[],javax.net.ssl.TrustManager[],java.security.SecureRandom)>(varReplacer2255, $r20, varReplacer2255) Second parameter was not properly generated as generated Trust Manager
3.3.1 no       yes SSLContext com.clevertap.android.sdk.SSLContextBuilder.build()Ljavax/net/ssl/SSLContext; r7 = staticinvoke <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String)>(varReplacer2261) First parameter (with value "TLS") should be any of {TLSv1, TLSv1.1, TLSv1.2}
- - yes SSLContext com.clevertap.android.sdk.SSLContextBuilder.build()Ljavax/net/ssl/SSLContext; virtualinvoke r7.<javax.net.ssl.SSLContext: void init(javax.net.ssl.KeyManager[],javax.net.ssl.TrustManager[],java.security.SecureRandom)>(varReplacer2264, $r20, varReplacer2264) First parameter was not properly generated as generated Key Manager
- - yes SSLContext com.clevertap.android.sdk.SSLContextBuilder.build()Ljavax/net/ssl/SSLContext; virtualinvoke r7.<javax.net.ssl.SSLContext: void init(javax.net.ssl.KeyManager[],javax.net.ssl.TrustManager[],java.security.SecureRandom)>(varReplacer2264, $r20, varReplacer2264) Second parameter was not properly generated as generated Trust Manager
3.3.2 no       yes SSLContext com.clevertap.android.sdk.SSLContextBuilder.build()Ljavax/net/ssl/SSLContext; r7 = staticinvoke <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String)>(varReplacer2294) First parameter (with value "TLS") should be any of {TLSv1, TLSv1.1, TLSv1.2}
- - yes SSLContext com.clevertap.android.sdk.SSLContextBuilder.build()Ljavax/net/ssl/SSLContext; virtualinvoke r7.<javax.net.ssl.SSLContext: void init(javax.net.ssl.KeyManager[],javax.net.ssl.TrustManager[],java.security.SecureRandom)>(varReplacer2287, $r20, varReplacer2287) First parameter was not properly generated as generated Key Manager
- - yes SSLContext com.clevertap.android.sdk.SSLContextBuilder.build()Ljavax/net/ssl/SSLContext; virtualinvoke r7.<javax.net.ssl.SSLContext: void init(javax.net.ssl.KeyManager[],javax.net.ssl.TrustManager[],java.security.SecureRandom)>(varReplacer2287, $r20, varReplacer2287) Second parameter was not properly generated as generated Trust Manager
3.3.3 no       yes SSLContext com.clevertap.android.sdk.SSLContextBuilder.build()Ljavax/net/ssl/SSLContext; r7 = staticinvoke <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String)>(varReplacer2284) First parameter (with value "TLS") should be any of {TLSv1, TLSv1.1, TLSv1.2}
- - yes SSLContext com.clevertap.android.sdk.SSLContextBuilder.build()Ljavax/net/ssl/SSLContext; virtualinvoke r7.<javax.net.ssl.SSLContext: void init(javax.net.ssl.KeyManager[],javax.net.ssl.TrustManager[],java.security.SecureRandom)>(varReplacer2289, $r20, varReplacer2289) First parameter was not properly generated as generated Key Manager
- - yes SSLContext com.clevertap.android.sdk.SSLContextBuilder.build()Ljavax/net/ssl/SSLContext; virtualinvoke r7.<javax.net.ssl.SSLContext: void init(javax.net.ssl.KeyManager[],javax.net.ssl.TrustManager[],java.security.SecureRandom)>(varReplacer2289, $r20, varReplacer2289) Second parameter was not properly generated as generated Trust Manager
3.3.4 no       yes SSLContext com.clevertap.android.sdk.SSLContextBuilder.build()Ljavax/net/ssl/SSLContext; r7 = staticinvoke <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String)>(varReplacer2297) First parameter (with value "TLS") should be any of {TLSv1, TLSv1.1, TLSv1.2}
- - yes SSLContext com.clevertap.android.sdk.SSLContextBuilder.build()Ljavax/net/ssl/SSLContext; virtualinvoke r7.<javax.net.ssl.SSLContext: void init(javax.net.ssl.KeyManager[],javax.net.ssl.TrustManager[],java.security.SecureRandom)>(varReplacer2292, $r20, varReplacer2292) First parameter was not properly generated as generated Key Manager
- - yes SSLContext com.clevertap.android.sdk.SSLContextBuilder.build()Ljavax/net/ssl/SSLContext; virtualinvoke r7.<javax.net.ssl.SSLContext: void init(javax.net.ssl.KeyManager[],javax.net.ssl.TrustManager[],java.security.SecureRandom)>(varReplacer2292, $r20, varReplacer2292) Second parameter was not properly generated as generated Trust Manager