Missing Authentication Vulnerability in AssetView and AssetView CLOUD by Hammock
CVE-2025-25060

8.2HIGH

Key Information:

Vendor: Hammock Corporation
Status: Assetview; Assetview Cloud
Vendor: CVE Published:; 2 April 2025

🔔 Create Hammock Corporation Vulnerability Alert

What is CVE-2025-25060?

A missing authentication vulnerability in AssetView and AssetView CLOUD enables remote attackers to gain unauthorized access to files on the server. This flaw could allow attackers to view or delete sensitive files without the need for authentication, posing a serious risk to data integrity and confidentiality for organizations using these products.

Affected Version(s)

AssetView prior to Ver 13.2.4.3408 (13.2.4O)

AssetView CLOUD prior to Ver 13.2.4.3408 (13.2.4O)

AssetView CLOUD prior to Ver 13.3.4.3004 (13.3.4K)

References

https://www.hammock.jp/assetview/info/250325.html

https://jvn.jp/en/jp/JVN26321838/

CVSS V3.0

Score:

8.2

Severity:

HIGH

Confidentiality:

High

Integrity:

Low

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Apr 2, 2025
Vulnerability Reserved
Mar 7, 2025

CVE-2025-25060 Data

JSON