CVE-2026-101020 — Hammock Corporation / AssetView

Description (CNA)

An incorrect permission assignment for critical resource issue exists in AssetView, AssetView CLOUD, and AssetView Cloud +. If this vulnerability is exploited, a local authenticated attacker who can log in to the Windows system where Management Console or Client Terminal for the product is running may gain SYSTEM privileges.

Affected (CNA)

Vendor / product	Versions
Hammock Corporation / AssetView	unaffected Ver 13.2.7B
Hammock Corporation / AssetView CLOUD	unaffected Ver 13.2.7B (13.2 series); unaffected Ver 13.3.7 (13.3 series)
Hammock Corporation / AssetView Cloud +	unaffected Ver 2600.201.11

CWE

CWE-732

References

https://www.hammock.jp/assetview/info/261013.html
https://jvn.jp/en/jp/JVN38664315/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.