An issue was discovered in the A4N (Aremis 4 Nomad) application 1.5.0 for Android. It allows SQL Injection, by which an attacker can bypass authentication and retrieve data that is stored in the database.
References
| Link | Resource |
|---|---|
| https://excellium-services.com/cert-xlm-advisory/CVE-2022-34909 | Third Party Advisory |
| https://www.aremis.com/en_GB/welcome | Not Applicable |
| https://excellium-services.com/cert-xlm-advisory/CVE-2022-34909 | Third Party Advisory |
| https://www.aremis.com/en_GB/welcome | Not Applicable |
Configurations
History
21 Nov 2024, 07:10
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://excellium-services.com/cert-xlm-advisory/CVE-2022-34909 - Third Party Advisory | |
| References | () https://www.aremis.com/en_GB/welcome - Not Applicable | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.7 |
07 Mar 2023, 16:53
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.1 |
| CWE | CWE-89 | |
| CPE | cpe:2.3:a:aremis:aremis_4_nomads:*:*:*:*:*:android:*:* | |
| References | (MISC) https://excellium-services.com/cert-xlm-advisory/CVE-2022-34909 - Third Party Advisory | |
| References | (MISC) https://www.aremis.com/en_GB/welcome - Not Applicable |
27 Feb 2023, 15:20
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-02-27 13:15
Updated : 2024-11-21 07:10
NVD link : CVE-2022-34909
Mitre link : CVE-2022-34909
CVE.ORG link : CVE-2022-34909
JSON object : View
Products Affected
aremis
- aremis_4_nomads
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')