CVE-2022-34909

Description

An issue was discovered in the A4N (Aremis 4 Nomad) application 1.5.0 for Android. It allows SQL Injection, by which an attacker can bypass authentication and retrieve data that is stored in the database.

References

https://www.aremis.com/en_GB/welcome

https://excellium-services.com/cert-xlm-advisory/CVE-2022-34909

https://cds.thalesgroup.com/en/tcs-cert/CVE-2022-34909

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS