Aremis

aremis

3 CVEs • 1 product

Products (1)

Click to collapse

Toggle

Aremis 4 Nomads

aremis_4_nomads

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-34910 1Aremis 1Aremis 4 Nomads Jun 17, 2026 Feb 27, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 An issue was discovered in the A4N (Aremis 4 Nomad) application 1.5.0 for Android. It uses a local database to store data and accounts. However, the password is stored in cleartext. Therefore, an attacker can retrieve th...Show more An issue was discovered in the A4N (Aremis 4 Nomad) application 1.5.0 for Android. It uses a local database to store data and accounts. However, the password is stored in cleartext. Therefore, an attacker can retrieve the passwords of other users that used the same device.Show less
CVE-2022-34909 1Aremis 1Aremis 4 Nomads Jun 17, 2026 Feb 27, 2023 N/A· v4 9.1 CRITICAL· v3 N/A· v2 An issue was discovered in the A4N (Aremis 4 Nomad) application 1.5.0 for Android. It allows SQL Injection, by which an attacker can bypass authentication and retrieve data that is stored in the database.
CVE-2022-34908 1Aremis 1Aremis 4 Nomads Jun 17, 2026 Feb 27, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 An issue was discovered in the A4N (Aremis 4 Nomad) application 1.5.0 for Android. It possesses an authentication mechanism; however, some features do not require any token or cookie in a request. Therefore, an attacker...Show more An issue was discovered in the A4N (Aremis 4 Nomad) application 1.5.0 for Android. It possesses an authentication mechanism; however, some features do not require any token or cookie in a request. Therefore, an attacker may send a simple HTTP request to the right endpoint, and obtain authorization to retrieve application data.Show less