Broken Authentication Vuln Threatens Amazon Photos Android App

A high-severity flaw in the Amazon Photos Android App — which has more than 50 million downloads — could allow attackers to steal a user’s Amazon access token and use it to access multiple Amazon APIs. The team at Checkmarx alerted Amazon to the broken authentication vulnerability in the Amazon Photo App for Android, which allows users to share, print, and store mobile photos.

Read full article on Dark Reading: Cloud