The App logs information. Sensitive information should never be logged.
ID |
objectivec.storage.ios_app_logging |
Severity |
low |
Remediation Complexity |
medium |
Remediation Risk |
medium |
Remediation Effort |
medium |
Resource |
Storage |
Language |
Objective-C |
Rationale
The App logs information. Sensitive information should never be logged.
The following code illustrates a vulnerable pattern detected by this rule:
// ============================================
// POSITIVE CASES (should trigger findings)
// ============================================
void badNSLog() {
NSString *password = @"secret123";
// VULNERABLE: The App logs information. Sensitive information should never be logged.
NSLog(@"User password: %@", password);
}Remediation
Follow secure coding practices and review the references below for detailed remediation guidance.
References
-
OWASP Top 10 2025 - A09 : Security Logging and Alerting Failures.