Security Advisory

CVE-2022-34908

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-02-27 00:00:00
Last updated 2025-05-30 16:02:10
Assigner mitre
State PUBLISHED

Description

An issue was discovered in the A4N (Aremis 4 Nomad) application 1.5.0 for Android. It possesses an authentication mechanism; however, some features do not require any token or cookie in a request. Therefore, an attacker may send a simple HTTP request to the right endpoint, and obtain authorization to retrieve application data.