CVE-2022-34910

5.5 mediumEPSS 0.1%

Medium (5.5) in aremis aremis 4 nomads. EPSS 0.1% chance of exploitation in the next 30 days.

An issue was discovered in the A4N (Aremis 4 Nomad) application 1.5.0 for Android. It uses a local database to store data and accounts. However, the password is stored in cleartext. Therefore, an attacker can retrieve the passwords of other users that used the same device.

Severity

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 2% of CVEs (scores of 2026-10-31)
CWE: CWE-312
Published: 2023-02-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

aremis:aremis_4_nomads

References

https://cds.thalesgroup.com/en/tcs-cert/CVE-2022-34910
https://excellium-services.com/cert-xlm-advisory/CVE-2022-34910
https://www.aremis.com/en_GB/welcome
https://excellium-services.com/cert-xlm-advisory/CVE-2022-34910
https://www.aremis.com/en_GB/welcome

Check your stack JSON