Sensitive Information Exposure in AssetView and AssetView CLOUD by Hammock
CVE-2025-27244

5.9MEDIUM

Key Information:

Vendor: Hammock Corporation
Status: Assetview; Assetview Cloud
Vendor: CVE Published:; 2 April 2025

🔔 Create Hammock Corporation Vulnerability Alert

What is CVE-2025-27244?

AssetView and AssetView CLOUD from Hammock are vulnerable to an information exposure issue. This flaw allows a remote unauthenticated attacker to potentially acquire sensitive information transmitted to the developer, risking the privacy of users and their data. It is crucial for organizations using these products to evaluate their security measures and apply necessary patches to mitigate potential threats.

Affected Version(s)

AssetView prior to Ver 13.2.4.3408 (13.2.4O)

AssetView CLOUD prior to Ver 13.2.4.3408 (13.2.4O)

AssetView CLOUD prior to Ver 13.3.4.3004 (13.3.4K)

References

https://www.hammock.jp/assetview/info/250325.html

https://jvn.jp/en/jp/JVN26321838/

CVSS V3.0

Score:

5.9

Severity:

MEDIUM

Confidentiality:

High

Integrity:

None

Availability:

High

Attack Vector:

Network

Attack Complexity:

High

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Apr 2, 2025
Vulnerability Reserved
Mar 7, 2025

CVE-2025-27244 Data

JSON