[This is a side-project]

We found the following vulnerabilities in the Android Lufthansa App version 5.6.1:

• SIK-2017-002 Http URLs in Lufthansa App
• SIK-2017-003 Insecure Crypto Keys in Lufthansa App
• SIK-2017-004 Private Files Extraction Possible in Lufthansa App
• SIK-2017-005 ADB Backup Allowed in Lufthansa App

All vulnerabilities are fixed by the vendor.