Other Ios Keychain Weak Accessibility Value

A key stored in the Keychain is using a weak accessibility value. kSecAttrAccessibleAlways allows access to the keychain item at all times, even when the device is locked. Storing sensitive data with this accessibility option means that the data is accessible to anyone who gains physical access to the device, regardless of whether it's locked or not. This in

IndexedPublic repositoryMediumMedium confidenceVerifiedLGPL-3.0-onlySwift
greprules fetch gitlab-sast-rules-lgpl-swift-other-rule-ios-keychain-weak-accessibility-value --engine opengrep

Description

A key stored in the Keychain is using a weak accessibility value. kSecAttrAccessibleAlways allows access to the keychain item at all times, even when the device is locked. Storing sensitive data with this accessibility option means that the data is accessible to anyone who gains physical access to the device, regardless of whether it's locked or not. This in