USAA Mobile - Customized SSL, Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application USAA Mobile published at the 'play' market has multiple vulnerabilities...

USAA Mobile App Information Disclosure

The USAA Mobile app for Android, prior to version 7.10.1 released 19 January, contains an information disclosure vulnerability. I have submitted a CVE-Assign request for this issue but do not yet have a CVE assigned. The issue is demonstrated with sanitized screen captures at...