CVE-2026-101020

State: Published
Severity: 8.5 High
Published: Oct 13, 2026
Updated: Oct 16, 2026
Reserved: Sep 28, 2026

Description

An incorrect permission assignment for critical resource issue exists in AssetView, AssetView CLOUD, and AssetView Cloud +. If this vulnerability is exploited, a local authenticated attacker who can log in to the Windows system where Management Console or Client Terminal for the product is running may gain SYSTEM privileges.

Scores

CVSS	Score	Vector	Source
4.0	8.5 High	CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N	jpcert
3.0	7.8 High	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	jpcert

Weaknesses

CWE-732 Incorrect permission assignment for critical resource

Affected Products

Product	Versions
AssetViewHammock Corporation	Ver 13.2.7BNot affected
AssetView CLOUDHammock Corporation	Ver 13.2.7B (13.2 series)Not affected Ver 13.3.7 (13.3 series)Not affected
AssetView Cloud +Hammock Corporation	Ver 2600.201.11Not affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.