VYPR

A4N

by Aremis

CVEs (2)

  • CVE-2022-34908Feb 27, 2023
    risk 0.00cvss epss 0.00

    An issue was discovered in the A4N (Aremis 4 Nomad) application 1.5.0 for Android. It possesses an authentication mechanism; however, some features do not require any token or cookie in a request. Therefore, an attacker may send a simple HTTP request to the right endpoint, and…

  • CVE-2022-34909Feb 27, 2023
    risk 0.00cvss epss 0.00

    An issue was discovered in the A4N (Aremis 4 Nomad) application 1.5.0 for Android. It allows SQL Injection, by which an attacker can bypass authentication and retrieve data that is stored in the database.