CVE-2026-101020: High severity Hammock Assetview vulnerability
An incorrect permission assignment for critical resource issue exists in AssetView, AssetView CLOUD, and AssetView Cloud +. If this vulnerability is exploited, a local authenticated attacker who can log in to the Windows system where Management Console or Client Terminal for the product is running may gain SYSTEM privileges.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this vulnerability?
Systems are exposed when AssetView, AssetView CLOUD, or AssetView Cloud + Management Console or Client Terminal is running on Windows and a local user can authenticate to that Windows system.
What access does an attacker need to exploit it?
An attacker needs local authenticated access to the Windows system hosting the Management Console or Client Terminal. No user interaction is required according to the provided CVSS vector.
What is the likely impact of successful exploitation?
A successful attacker may obtain SYSTEM privileges on the affected Windows system, enabling high-impact compromise of confidentiality, integrity, and availability.