CVE-2022-34910

An issue was discovered in the A4N (Aremis 4 Nomad) application 1.5.0 for Android. It uses a local database to store data and accounts. However, the password is stored in cleartext. Therefore, an attacker can retrieve the passwords of other users that used the same device.

Score

CVSS 3.1 5.5 Medium

Status

Modified - cve@mitre.org

Published

2023-02-27

Last modified

2025-05-30

Weaknesses

CWE-312

Affected products

• Aremis 4 Nomads (Aremis)

References

• https://cds.thalesgroup.com/en/tcs-cert/CVE-2022-34910
• https://excellium-services.com/cert-xlm-advisory/CVE-2022-34910
• https://www.aremis.com/en_GB/welcome