CVE-2025-27244

State: Published
Severity: 5.9 Medium
Published: Apr 2, 2025
Updated: Apr 2, 2025
Reserved: Mar 7, 2025

Description

AssetView and AssetView CLOUD contain an issue with acquiring sensitive information from sent data to the developer. If exploited, sensitive information may be obtained by a remote unauthenticated attacker.

Scores

CVSS	Score	Vector	Source
3.0	5.9 Medium	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N	jpcert

Weaknesses

CWE-201 Insertion of sensitive information into sent data

Affected Products

Product	Versions
AssetViewHammock Corporation	prior to Ver 13.2.4.3408 (13.2.4O)Affected
AssetView CLOUDHammock Corporation	prior to Ver 13.2.4.3408 (13.2.4O)Affected
AssetView CLOUDHammock Corporation	prior to Ver 13.3.4.3004 (13.3.4K)Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.