Lack of SSL Certificate Verification in Heavy Duty Truck Driver Simulator 3D App for Android

Lack of SSL Certificate Verification in Heavy Duty Truck Driver Simulator 3D App for Android

CVE-2014-5898 · MEDIUM Severity

AV:A/AC:M/AU:N/C:P/I:P/A:P

The Heavy Duty Truck Driver Simulator 3D (aka com.oas.heavy.duty.truck.driver.simulator3d) application 1.0.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Learn more about our Cis Benchmark Audit For Google Android.