MyAflac

com.aflac.access (26.4.0)

Security Rating

7.5

AVERAGE

DOWNLOAD REPORT

VIEW CERTIFICATE

HIDE REPORT

SHARE

Use BeVigil on your Phone

Download the BeVigil App

OPEN REPORT MENU

SUMMARY

ISSUES SEVERITY

MANIFEST SCANNER

exported activity

MEDIUM

resources/AndroidManifest.xml

VULNERABILITIES

webview ignores ssl errors

MEDIUM

sources/org/apache/cordova/engine/SystemWebViewClient.java

STRINGS

possible secret

MEDIUM

resources/res/values/strings.xml

ASSETS

filename

LOW

resources/assets/public/pro-manifest.json

0 CRITICAL severity MANIFEST issues present

0 HIGH severity MANIFEST issues present

1 MEDIUM severity MANIFEST issues present

0 LOW severity MANIFEST issues present

0 INFO severity MANIFEST issues present

0 RESILIENCE severity MANIFEST issues present

0 CRITICAL severity VULNERABILITIES issues present

0 HIGH severity VULNERABILITIES issues present

6 MEDIUM severity VULNERABILITIES issues present

1 LOW severity VULNERABILITIES issues present

6 INFO severity VULNERABILITIES issues present

0 RESILIENCE severity VULNERABILITIES issues present

0 CRITICAL severity STRINGS issues present

0 HIGH severity STRINGS issues present

12 MEDIUM severity STRINGS issues present

18 LOW severity STRINGS issues present

0 INFO severity STRINGS issues present

0 RESILIENCE severity STRINGS issues present

0 CRITICAL severity ASSETS issues present

0 HIGH severity ASSETS issues present

0 MEDIUM severity ASSETS issues present

1351 LOW severity ASSETS issues present

0 INFO severity ASSETS issues present

0 RESILIENCE severity ASSETS issues present

ISSUES

WebView ignores SSL errors - 1 issues

Insecure Random Used - 6 issues

Storage of sensitive information in Shared Preferences - 3 issues

WebView javascript and file access enabled - 1 issues

Remote WebView debugging enabled - 1 issues

WebView javascript enabled - 1 issues

MALWARES

0

MALWARES

APKiD

1

APKiD

STRINGS

Possible Secret Detected - 12 matches

Possible UUID - 3 matches

Unknown High Entropy String - 15 matches

ASSETS

Filename - 6 matches

URL - 174 matches

Hostname - 54 matches

File path - 407 matches

REST API - 404 matches

Relative Endpoint - 297 matches

PERMISSIONS SUMMARY

Permissions

Count

Safe

4

Risky

2

Dangerous

0

ASSETS WORDCLOUD

api.ionicjs.com - 1 count

cordova.apache.org - 1 count

www.aflac.com - 11 count

aflaccx.qualtrics.com - 2 count

memberportal.aflac.com - 1 count

davisvision.com - 1 count

myaccount.aflac.com - 1 count

www.aflacgroupinsurance.com - 4 count

apps.apple.com - 2 count

play.google.com - 2 count

associatewellnesssubmission.aflac.com - 1 count

api-cloud0.aflac.com - 1 count

myaflac.aflac.com - 1 count

mylogin.aflac.com - 1 count

phs.aflac.com - 1 count

TRACKERS

0

TRACKERS

THIRD PARTY LIBRARIES

34

THIRD PARTY LIBRARIES

CONTACT

Website

https://www.aflac.com/

Email

[email protected]

HIDE REPORT

Are you the developer or owner of this app? Choose to keep your report private from BeVigil's Search for 30 days.

HIDE

Access your Aflac account 24/7 with MyAflac®. <br>Register for MyAflac to access information about your coverage, at your convenience. <br>- Submit claims and check claims status<br>- View secure messages including your explanation of benefits <br>- View and manage your coverage <br>- Make changes to your policies <br>- Make payments and enroll in direct deposit for fast claim payments<br>- View your agent’s contact information <br>- Enroll in Aflac Always to keep your coverage at the same rate – even if circumstances change<br>Download the MyAflac app today.