VULNERABILITY INTELLIGENCE
CVE-2022-34910
CVSS score4.1 MEDIUM
EPSS probability0.13%
CISA KEVNot currently listed
Published2023-02-27
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
Description
An issue was discovered in the A4N (Aremis 4 Nomad) application 1.5.0 for Android. It uses a local database to store data and accounts. However, the password is stored in cleartext. Therefore, an attacker can retrieve the passwords of other users that used the same device.
Weakness classification
- nvd@nist.gov: CWE-312
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-312
Primary references
- cve@mitre.org
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Not Applicable
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Not Applicable