Popscene (Music Industry Sim) - Customized SSL, Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Popscene Music Industry Sim published at the 'play' market has multiple vulnerabilities...

CVE-2014-5560

The Popscene Music Industry Sim aka air.Popscene application 1.04 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Popscene Music Industry Sim aka air.Popscene application 1.04 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5560

The CVE-2014-5560 entry concerns the Android app Popscene (Music Industry Sim) / air.Popscene version 1.04 that fails to verify SSL X.509 certificates. Root cause: missing certificate validation in SSL/TLS connections, which can allow MITM attackers to spoof servers and capture/reveal sensitive i...

CVE-2014-5560

The Popscene Music Industry Sim aka air.Popscene application 1.04 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...