Your Freedom VPN Client - Certificates or keys found, Customized SSL, Exported components vulnerabilities

Name

Vendor

Link

Store

Version

• NOTICE
External URLs

Were do they point?

Possible privilege escalation

This app is looking for root tools.

Unsafe deleting

All items deleted with 'file.delete()' could be recovered.

KeyStore usage

The app uses Android KeyStore subsystem.

Suspicious files

Are you sure these files should be here?

Native code usage

Native code (.so) usage 'System.loadLibrary();' is found.

• MEDIUM
SD-card access

SD-cards and other external storages have 'worldwide read' policy.

Certificates or keys found

These credentials could be used for authentication.

Exported components

Other applications could access the interfaces.

Runtime command execution

Function 'Runtime.getRuntime().exec()' is used, please check where variables are come from.

• CRITICAL
Customized SSL

Check certificate validation. Do not create or redefine X509Certificate class methods by yourself, if you don't understand risks. Use the existing API.

References