Skip to content
OpenAdvisories
High · 8.2 CVE-2025-25060 EUVD-2025-9500GHSA-rh42-r2fh-w434

Missing authentication for critical function vulnerability exists in AssetView and AssetView CLOUD. If exploited, the files on the server w…

Published Apr 2, 2025 · Updated Apr 2, 2025 · Assigned by jpcert

Description

Missing authentication for critical function vulnerability exists in AssetView and AssetView CLOUD. If exploited, the files on the server where the product is running may be obtained and/or deleted by a remote unauthenticated attacker.

Affected products

VendorProductAffectedFixed
Hammock AssetView prior to Ver 13.2.4.3408 (13.2.4O) —
Hammock AssetView CLOUD prior to Ver 13.2.4.3408 (13.2.4O), prior to Ver 13.3.4.3004 (13.3.4K) —

References