Hammock AssetView and AssetView CLOUD Missing Authentication Vulnerability in Critical Functions

A vulnerability allowing missing authentication for critical functions has been identified in Hammock's AssetView and AssetView CLOUD products. This issue affects AssetView versions prior to 13.2.4.3408 and AssetView CLOUD versions prior to 13.2.4.3408 and 13.3.4.3004. The vulnerability allows remote unauthenticated attackers to access or delete files on the server where the product is running.

Impact

Exploitation of this vulnerability could lead to unauthorized access to or deletion of files on the server.

Remediation

Users of AssetView should visit the AssetView support website to download the latest version and follow the provided upgrade instructions. AssetView CLOUD users will be contacted by the company for upgrade instructions. For immediate concerns, contact the Hammock support group.