GCVE - cpe:2.3:a:aremis:aremis_4_nomads:*:*:*:*:*:android:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:aremis:aremis_4_nomads:*:*:*:*:*:android:*:*

part: a version: * update: *

Vendor	Aremis (`0af894c0-f0dc-5f2b-a53e-b20486ef4560`)
Product	Aremis 4 Nomads (`e965e533-bab1-5a2a-8234-1e892f13af65`)
Edition	*
Language	*
Software edition	*
Target software	android
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-34910`	vulnerable	2026-06-08 05:46:04.002524	Details available MEDIUM (4.1) An issue was discovered in the A4N (Aremis 4 Nomad) application 1.5.0 for Android. It uses a local database to store data and accounts. However, the password is stored in cleartext. Therefore, an attacker can retrieve the passwords of other users that used the same device. Published: 2023-02-27T00:00:00.000Z Updated: 2025-05-30T16:02:13.753Z Open on db.gcve.eu Reference links https://www.aremis.com/en_GB/welcome https://excellium-services.com/cert-xlm-advisory/CVE-2022-34910 https://cds.thalesgroup.com/en/tcs-cert/CVE-2022-34910	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-34909`	vulnerable	2026-06-08 05:46:04.002173	Details available HIGH (7.7) An issue was discovered in the A4N (Aremis 4 Nomad) application 1.5.0 for Android. It allows SQL Injection, by which an attacker can bypass authentication and retrieve data that is stored in the database. Published: 2023-02-27T00:00:00.000Z Updated: 2025-05-30T16:02:13.360Z Open on db.gcve.eu Reference links https://www.aremis.com/en_GB/welcome https://excellium-services.com/cert-xlm-advisory/CVE-2022-34909 https://cds.thalesgroup.com/en/tcs-cert/CVE-2022-34909	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-34908`	vulnerable	2026-06-08 05:46:04.001715	Details available HIGH (8.2) An issue was discovered in the A4N (Aremis 4 Nomad) application 1.5.0 for Android. It possesses an authentication mechanism; however, some features do not require any token or cookie in a request. Therefore, an attacker may send a simple HTTP request to the right endpoint, and obtain authorization to retrieve application data. Published: 2023-02-27T00:00:00.000Z Updated: 2025-05-30T16:02:10.463Z Open on db.gcve.eu Reference links https://www.aremis.com/en_GB/welcome https://excellium-services.com/cert-xlm-advisory/CVE-2022-34908 https://cds.thalesgroup.com/en/tcs-cert/CVE-2022-34908	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.