BAND - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application BAND published at the 'play' market has multiple vulnerabilities...

CVE-2014-5668

CVE-2014-5668 affects the BAND - Group sharing & planning (com.nhn.android.band) Android app version 3.2.8. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted c...