CVE-2022-34908 (aremis_4_nomads)

An issue was discovered in the A4N (Aremis 4 Nomad) application 1.5.0 for Android. It possesses an authentication mechanism; however, some features do not require any token or cookie in a request. Therefore, an attacker may send a simple HTTP request to the right endpoint, and obtain authorization to retrieve application data.

android application authentication authorization cookie cve data endpoint features http issue may nomad request send simple token