Hard Time (Prison Sim) - Dangerous filesystem permissions, Insecure KeyStore, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Hard Time Prison Sim published at the 'play' market has multiple vulnerabilities...

CVE-2014-5558

The CVE-2014-5558 issue affects the Android app Hard Time (Prison Sim) 1.111 (aka air.HardTime). The vulnerability is failure to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and exfiltrate sensitive information via a crafted certificate. The co...