CVE-2026-101020
An incorrect permission assignment for critical resource issue exists in AssetView, AssetView CLOUD, and AssetView Cloud +. If this vulnerability is exploited, a local authenticated attacker who can log in to the Windows system where Management Console or Client Terminal for the product is running may gain SYSTEM privileges.
- Score
- CVSS 4.0 8.5 High
- Status
- Deferred - vultures@jpcert.or.jp
- Published
- 2026-10-13
- Last modified
- 2026-10-16
- Weaknesses
- CWE-732
Affected products
- Assetview (Hammock Corporation)
- Assetview Cloud (Hammock Corporation)
- Assetview Cloud (Hammock Corporation)
References
- https://www.hammock.jp/assetview/info/261013.html
- https://jvn.jp/en/jp/JVN38664315/
