CVE-2025-27244 | THREATINT

Description

AssetView and AssetView CLOUD contain an issue with acquiring sensitive information from sent data to the developer. If exploited, sensitive information may be obtained by a remote unauthenticated attacker.

Reserved 2025-03-07 | Published 2025-04-02 | Updated 2025-04-02 | Assigner jpcert

MEDIUM: 5.9CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Problem types

Insertion of sensitive information into sent data

Product status

prior to Ver 13.2.4.3408 (13.2.4O)

affected

prior to Ver 13.2.4.3408 (13.2.4O)

affected

prior to Ver 13.3.4.3004 (13.3.4K)

affected

References

www.hammock.jp/assetview/info/250325.html

jvn.jp/en/jp/JVN26321838/

cve.org (CVE-2025-27244)

nvd.nist.gov (CVE-2025-27244)

Download JSON