title: Android Vulnerability Exported activity=true
body: <p>I have an application that has only 1 activity &quot;MainActivity&quot; and it must be divided in fragments, because there are 3 windows, one of them is the user details, and this activity (the main activity) has exported=true.</p>
  <p>I want to know if this entails a security flaw in an Android APK:</p>
  <p>I log in the application
  I start the activity with drozer: <code>run app.activity.start --component com.member com.member.MainActivity</code>
  I can see the user details, but not in the first display, I need to press another tab, which must be another fragment inside the MainActivity.</p>
  <p>Is it the normal behavior?
  It is true that exported activities can be used by apps with a different uid, but the user must be logged in, which problem does it entail?</p>
  <p>Regards!</p>