CVE-2022-34908 - CVE House
Back to Database
Status published High CVE-2022-34908

An issue was discovered in the A4N (Aremis 4 Nomad)...

Vulnerability Description

An issue was discovered in the A4N (Aremis 4 Nomad) application 1.5.0 for Android. It possesses an authentication mechanism; however, some features do not require any token or cookie in a request. Therefore, an attacker may send a simple HTTP request to the right endpoint, and obtain authorization to retrieve application data.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-34908

Credits & Attribution

No credits recorded in the NVD database.

References

More from aremis

View All →
CVE-2022-34910
An issue was discovered in the A4N (Aremis 4 Nomad)...
Medium 4.1
CVE-2022-34909
An issue was discovered in the A4N (Aremis 4 Nomad)...
High 7.7

Affected Vendor

Affected Software

aremis 4 nomads
Vulnerable Versions:
0

Timeline

Official Publish: February 27th, 2023
Last Modified: May 30th, 2025
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AC:L/AV:N/A:N/C:H/I:L/PR:N/S:U/UI:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.