{"id":"CVE-2025-25060","state":"PUBLISHED","title":"Missing authentication for critical function vulnerability exists in AssetView and AssetView CLOUD. If exploited, the files on the server where the product is running may be obtain","description":"Missing authentication for critical function vulnerability exists in AssetView and AssetView CLOUD. If exploited, the files on the server where the product is running may be obtained and/or deleted by a remote unauthenticated attacker.","publishedAt":"2025-04-02T03:20:54.826Z","updatedAt":"2025-04-02T16:04:49.028Z","severity":{"score":8.2,"label":"High","version":"3.0","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N","source":"jpcert"},"assigner":"jpcert","products":["Hammock Corporation AssetView","Hammock Corporation AssetView CLOUD"],"affected":[{"vendor":"Hammock Corporation","product":"AssetView","versions":[{"version":"prior to Ver 13.2.4.3408 (13.2.4O)","status":"affected"}]},{"vendor":"Hammock Corporation","product":"AssetView CLOUD","versions":[{"version":"prior to Ver 13.2.4.3408 (13.2.4O)","status":"affected"}]},{"vendor":"Hammock Corporation","product":"AssetView CLOUD","versions":[{"version":"prior to Ver 13.3.4.3004 (13.3.4K)","status":"affected"}]}],"references":["https://www.hammock.jp/assetview/info/250325.html","https://jvn.jp/en/jp/JVN26321838/"],"weaknesses":["CWE-306"],"ingestedAt":"2026-10-29T20:08:47.682Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/25xxx/CVE-2025-25060.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-25060","state":"PUBLISHED","datePublished":"2025-04-02T03:20:54.826Z","dateUpdated":"2025-04-02T16:04:49.028Z","assignerShortName":"jpcert","assignerOrgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","dateReserved":"2025-03-07T06:04:12.829Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Missing authentication for critical function vulnerability exists in AssetView and AssetView CLOUD. If exploited, the files on the server where the product is running may be obtained and/or deleted by a remote unauthenticated attacker."}],"affected":[{"vendor":"Hammock Corporation","product":"AssetView","versions":[{"version":"prior to Ver 13.2.4.3408 (13.2.4O)","status":"affected"}]},{"vendor":"Hammock Corporation","product":"AssetView CLOUD","versions":[{"version":"prior to Ver 13.2.4.3408 (13.2.4O)","status":"affected"}]},{"vendor":"Hammock Corporation","product":"AssetView CLOUD","versions":[{"version":"prior to Ver 13.3.4.3004 (13.3.4K)","status":"affected"}]}],"references":[{"url":"https://www.hammock.jp/assetview/info/250325.html"},{"url":"https://jvn.jp/en/jp/JVN26321838/"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}],"cvssV3_0":{"version":"3.0","baseSeverity":"HIGH","baseScore":8.2,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-306","description":"Missing authentication for critical function","lang":"en-US","type":"CWE"}]}],"providerMetadata":{"shortName":"jpcert","orgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","dateUpdated":"2025-04-02T03:20:54.826Z"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-04-02T15:44:53.916896Z","id":"CVE-2025-25060","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-04-02T16:04:49.028Z"}}]}}}