{% load i18n %} {% with icon_done="data:image/svg+xml;base64,PHN2ZyBjbGFzcz0iY2hlY2ttYXJrIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHZpZXdCb3g9IjAgMCA1MiA1MiI+CjxjaXJjbGUgY3g9IjI2IiBjeT0iMjYiIHI9IjI1IiBmaWxsPSIjN2FjMTQyIi8+CjxwYXRoIGZpbGw9IiNmZmYiIGQ9Ik0xMSAyNiBsNCAtNCBsOCA4IGwxNSAtMTUgbDQgNCBsLTE5IDE5Ii8+Cjwvc3ZnPg==" icon_not_done="data:image/svg+xml;base64,PHN2ZyBjbGFzcz0iY2hlY2ttYXJrIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHZpZXdCb3g9IjAgMCA1MiA1MiI+CjxjaXJjbGUgY3g9IjI2IiBjeT0iMjYiIHI9IjI1IiBmaWxsPSIjZjAwIi8+CjxwYXRoIGZpbGw9IiNmZmYiIGQ9Ik0yMiAyNiBsLTEwIC0xMCBsNCAtNCBsMTAgMTAgbDEwIC0xMCBsNCA0IGwtMTAgMTAgbDEwIDEwIGwtNCA0IGwtMTAgLTEwIGwtMTAgMTAgbC00IC00Ii8+Cjwvc3ZnPg==" %} Appknox Report

{% trans "App Security Report" %}

{% trans "For Internal Purpose" %}
{% if report.prepared_for.logo != '' %} {% else %}

{{ report.prepared_for.name }}

{% endif %}
{{ report.application.name }}
{{ report.package_name }} {{ report.platform.name }}
{{ report.application.version }}
{% if not report.prepared_by.hide and not report.powered_by.hide %} {% elif not report.prepared_by.hide and report.powered_by.hide %} {% elif report.prepared_by.hide and not report.powered_by.hide %} {% endif %}
{% trans "Prepared by" %}
{% if report.prepared_by.logo != '' %} {% else %}

{{ report.prepared_by.name }}

{% endif %}
{% trans "Powered by" %}
{% if report.powered_by.logo != '' %} {% else %}

{{ report.powered_by.name }}

{% endif %}
{% trans "Prepared by" %}
{% if report.prepared_by.logo != '' %} {% else %}

{{ report.prepared_by.name }}

{% endif %}
{% trans "Powered by" %}
{% if report.powered_by.logo != '' %} {% else %}

{{ report.powered_by.name }}

{% endif %}
{% if report.show_copyright %}

{% trans "Portions of this document and the templates used in its production are the property of Appknox" %}{% if report.is_partnered and not report.powered_by.hide %}{% trans " and " %}{{ report.prepared_by.name }}{% trans "," %}{% endif %}{% trans " and cannot be copied without permission." %}

{% endif %}

{% trans "While precautions have been taken in the preparation of this document, the publisher and the author(s) assume no responsibility for errors, omissions, or for damages resulting from the use of the information contained herein. Use of " %}{% if report.show_copyright %}{% trans "Appknox" %}{% if report.is_partnered and not report.powered_by.hide %}{% trans " and " %}{{ report.prepared_by.name }}{% trans "," %}{% endif %}{% endif %}{% trans " services does not guarantee the security of a system, or that intrusions will not occur." %}

{% trans "Application Details" %}

{% trans "Application Name" %} {{ report.application.name }} {% for meta_name in report.custom_meta_names %}
{{ meta_name }}{% endfor %}
{% trans "Platform" %} {{ report.platform.name }}
{% trans "Application Namespace" %} {{ report.package_name }}
{% trans "Version" %} {{ report.application.version }}
{% trans "Version Code" %} {{ report.application.version_code }}
{% trans "Application SHA1 Hash" %} {{ report.application.sha1 }}
{% trans "Application MD5 Hash" %} {{ report.application.md5 }}

{% trans "Audit Details" %}

{% if report.appknox_file_id %} {% endif %}
{% trans "File ID" %} {{ report.appknox_file_id }}
{% trans "Audit Date" %} {{ report.created_on }}
{% trans "Scan Status" %} {% for assessment_type in report.assessment_types %} {% if assessment_type.can_include %} {% if assessment_type.is_done %} {% else %} {% endif %} {{ assessment_type.display }} {% endif %} {% endfor %}
{% trans "Scans included in the Report" %}
    {% for assessment_type in report.assessment_types %} {% if assessment_type.is_included %}
  • {{ assessment_type.display }}
    • {% endif %} {% endfor %}

{% trans "Table of Contents" %}

{% for analysis in report.viewable_analyses %} {% if analysis.risk.computed_value > 0 %} {% if analysis.incorrect_implementation.html %} {% endif %} {% if analysis.correct_implementation.html %} {% endif %} {% if analysis.business_implication.html %} {% endif %} {% if analysis.vulnerability_references.html %} {% endif %} {% endif %} {% endfor %}

{% trans "Report Summary" %}

{% trans "Audit Summary" %}
{% if report.show_copyright %}{% trans "Appknox " %}{% endif %}{% trans "Security Rating" %}

{{ analysis.title.html }}

{% trans "Noncompliant Code Example" %}
{% trans "Compliant Solution" %}
{% trans "Business Implication" %}
{% trans "Related Vulnerabilities" %}

{% trans "Report Summary" %}

{% if report.show_copyright %}{% if report.is_partnered and not report.powered_by.hide %}{{ report.prepared_by.name }}{% trans ", powered by " %}{% endif %}{% trans "Appknox" %}{% if report.is_partnered and not report.powered_by.hide %}{% trans "," %}{% endif %}{% trans " conducted a security assessment of the mobile application. " %}{% endif %}{% trans "This report is generated based on the findings during the automated" %}{% if report.is_manual_scan_included %}{% trans " and manual" %}{% endif %}{% trans " auditing process. It also contains the process of discovering those vulnerabilities in the first place, and ways to remediate those issues." %}

{% trans "Audit Summary" %}

{% for analysis in report.viewable_analyses %} {% endfor %}
{{ analysis.title.html | safe }}
{% for tag in analysis.tags %} {{ tag.val }} {% endfor %}
{% if analysis.risk.computed_value == -1 %}

{{ analysis.question.html | safe }}

{% elif analysis.risk.computed_value == 0 %}

{{ analysis.success_message.html | safe }}

{% else %}

{{ analysis.desc.html | safe }}

{% endif %} 		{% if analysis.risk.computed_value > 0 %}
{{ analysis.cvss_v3.base_score }}
{% endif %} {% if analysis.risk.is_overridden %} (user edited) {% endif %}
{% trans "Priority Level" %} {% trans "Number of failed test cases" %}
{% trans "Critical Risk" %} {{ report.critical_count }}
{% trans "High Risk" %} {{ report.high_count }}
{% trans "Medium Risk" %} {{ report.medium_count }}
{% trans "Low Risk" %} {{ report.low_count }}

{% if report.show_copyright %}{% trans "Appknox " %}{% endif %}{% trans "Security Rating" %}

{% if report.svg_chart %} {% endif %}
  • {% trans "Critical" %} - {{ report.critical_percent }}%
  • {% trans "High" %} - {{ report.high_percent }}%
  • {% trans "Medium" %} - {{ report.medium_percent }}%
  • {% trans "Low" %} - {{ report.low_percent }}%
  • {% trans "Passed" %} - {{ report.passed_percent }}%
    • {% if report.hide_untested_analyses %}
  • {% trans "Untested" %} - {{ report.untested_percent }}%
    • {% endif %}

{% if report.show_copyright %}{% trans "Appknox " %}{% endif %}{% trans "Security Rating:" %} {{ report.rating }} {% trans "Unsecured" %}

{% for analysis in report.viewable_analyses %} {% if analysis.risk.computed_value > 0 %}

{{ analysis.title.html | safe }}

{{ analysis.intro.html | safe }}

{% if analysis.risk.is_overridden %} (user edited) {% endif %} {% for tag in analysis.tags %} {% endfor %}
{% if analysis.risk.is_overridden %}
{% trans "This risk has been overridden from" %} {{ analysis.risk.value_label }} {% trans "to" %} {{ analysis.risk.computed_value_label }}. {% if analysis.risk.override_comment %} {% trans "The reason is:" %} "{{ analysis.risk.override_comment }}"{% endif %}
{% endif %}

{% trans "CVSS" %}

{% trans "Version 3.0 Base Score" %}

{{ analysis.cvss_v3.base_score }}

 {% trans "Attack vector" %}: {{ analysis.cvss_v3.attack_vector }} {% trans "Attack complexity" %}: {{ analysis.cvss_v3.attack_complexity }}
{% trans "Privileges required" %}: {{ analysis.cvss_v3.privileges_required }} {% trans "User Interaction" %}: {{ analysis.cvss_v3.user_interaction }}
{% trans "Scope" %}: {{ analysis.cvss_v3.scope }} {% trans "Confidentiality Impact" %}: {{ analysis.cvss_v3.confidentiality_impact }}
{% trans "Integrity Impact" %}: {{ analysis.cvss_v3.integrity_impact }} {% trans "Availability Impact" %}: {{ analysis.cvss_v3.availability_impact }}
{% if analysis.regulatory.owasp or analysis.regulatory.cwe or analysis.regulatory.mstg or analysis.regulatory.asvs or analysis.regulatory.pcidss or analysis.regulatory.hipaa or analysis.regulatory.gdpr %}

{% trans "Regulatory" %}

{% if analysis.regulatory.owasp %}
{% trans "OWASP" %}
{% for owasp in analysis.regulatory.owasp %} {% endfor %}
{{ owasp.code }} {{ owasp.title }}
{% endif %}
{% if analysis.regulatory.cwe %}
{% trans "CWE" %}
{% for cwe in analysis.regulatory.cwe %} {% endfor %}
{{ cwe.code }} {{ cwe.url }}
{% endif %}
{% if analysis.regulatory.mstg %}
{% trans "MSTG" %}
{% for mstg in analysis.regulatory.mstg %} {% endfor %}
{{ mstg.code }} {{ mstg.title }}
{% endif %}
{% if analysis.regulatory.asvs %}
{% trans "ASVS" %}
{% for asvs in analysis.regulatory.asvs %} {% endfor %}
{{ asvs.code }} {{ asvs.title }}
{% endif %}
{% if analysis.regulatory.pcidss %}
{% trans "PCI-DSS" %}
{% for pcidss in analysis.regulatory.pcidss %} {% endfor %}
{{ pcidss.code }}
{{ pcidss.title }}
{{ pcidss.description }}
{% endif %}
{% if analysis.regulatory.hipaa %}
{% trans "HIPAA" %}
{% for hipaa in analysis.regulatory.hipaa %} {% endfor %}
{{ hipaa.code }}
{{ hipaa.safeguard }}: {{ hipaa.title }}
    {% for std in hipaa.standards %}
  • {{ std.title }} ({{ std.specifications }})
    {{ std.description }}
    • {% endfor %}
{% endif %}
{% if analysis.regulatory.gdpr %}
{% trans "GDPR" %}
{% for gdpr in analysis.regulatory.gdpr %} {% endfor %}
{{ gdpr.code }} {{ gdpr.title }}
{% endif %}
{% endif %}

{% trans "Risk Assessment" %}

{{ analysis.desc.html | safe }}

{% for finding in analysis.findings %} {% if finding.title.html %}
{{ finding.title.html | escape }}
{% endif %} 
{{ finding.description.html | escape }}
{% endfor %}
{% if analysis.attachments %}
{% for attachment in analysis.attachments %}
{{ attachment.name }}
{% endfor %}
{% endif %} {% if analysis.incorrect_implementation.html %}

{% trans "Noncompliant Code Example" %}

{{ analysis.incorrect_implementation.html | safe }}
{% endif %} {% if analysis.correct_implementation.html %}

{% trans "Compliant Solution" %}

{{ analysis.correct_implementation.html | safe }}
{% endif %} {% if analysis.business_implication.html %}

{% trans "Business Implication" %}

{{ analysis.business_implication.html | safe }}
{% endif %} {% if analysis.vulnerability_references.html %}

{% trans "Related Vulnerabilities" %}

{{ analysis.vulnerability_references.html | safe }}
{% endif %}
{% endif %} {% endfor %}

{% trans "References" %}

    {% for ref in report.references %}
  1. {{ ref.name }}
    2. {% endfor %}
{% endwith %}