Skip to content
OpenAdvisories
Medium · 5.9 CVE-2025-27244 EUVD-2025-9501GHSA-qgx5-262m-999p

AssetView and AssetView CLOUD contain an issue with acquiring sensitive information from sent data to the developer. If exploited, sensitiv…

Published Apr 2, 2025 · Updated Apr 2, 2025 · Assigned by jpcert

Description

AssetView and AssetView CLOUD contain an issue with acquiring sensitive information from sent data to the developer. If exploited, sensitive information may be obtained by a remote unauthenticated attacker.

Affected products

VendorProductAffectedFixed
Hammock AssetView prior to Ver 13.2.4.3408 (13.2.4O) —
Hammock AssetView CLOUD prior to Ver 13.2.4.3408 (13.2.4O), prior to Ver 13.3.4.3004 (13.3.4K) —

References