CVEvulnerability
CVE-2022-34910
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-02-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.1 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-312
Description
An issue was discovered in the A4N (Aremis 4 Nomad) application 1.5.0 for Android. It uses a local database to store data and accounts. However, the password is stored in cleartext. Therefore, an attacker can retrieve the passwords of other users that used the same device.
Affected configurations
• aremis aremis 4 nomads (< 1.5.1)
Related
Weakness · CWE (1)
- CWE-312 Cleartext Storage of Sensitive Information weakness
References
- https://cds.thalesgroup.com/en/tcs-cert/CVE-2022-34910 cds.thalesgroup.com
- https://excellium-services.com/cert-xlm-advisory/CVE-2022-34910 Third Party Advisory
- https://www.aremis.com/en_GB/welcome Not Applicable
- https://excellium-services.com/cert-xlm-advisory/CVE-2022-34910 Third Party Advisory
- https://www.aremis.com/en_GB/welcome Not Applicable