{"schema":"threatline.record/2","record":{"id":"CVE-2026-101020","aliases":[],"summary":"An incorrect permission assignment for critical resource issue exists in AssetView, AssetView CLOUD, and AssetView Cloud +. If this vulnerability is exploited, a local authenticated attacker who can l","details":"An incorrect permission assignment for critical resource issue exists in AssetView, AssetView CLOUD, and AssetView Cloud +. If this vulnerability is exploited, a local authenticated attacker who can log in to the Windows system where Management Console or Client Terminal for the product is running may gain SYSTEM privileges.","categories":["Unclassified"],"product":"AssetView","vendor":"Hammock Corporation","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101020","source_modified_at":"2026-10-16T17:18:51.739Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"AssetView","vendor":"Hammock Corporation","versions":[{"version":"Ver 13.2.7B","status":"unaffected"}],"defaultStatus":"unknown"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101020","source_modified_at":"2026-10-16T17:18:51.739Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"AssetView CLOUD","vendor":"Hammock Corporation","versions":[{"version":"Ver 13.2.7B (13.2 series)","status":"unaffected"},{"version":"Ver 13.3.7 (13.3 series)","status":"unaffected"}],"defaultStatus":"unknown"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101020","source_modified_at":"2026-10-16T17:18:51.739Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"AssetView Cloud +","vendor":"Hammock Corporation","versions":[{"version":"Ver 2600.201.11","status":"unaffected"}],"defaultStatus":"unknown"}],"fixed_versions":[],"cvss":7.8,"severity":"High","kev":{"listed":false},"epss":{"probability":0.00104,"percentile":0.00988,"score_date":"2026-10-23"},"published_at":"2026-10-13T08:40:15.589Z","modified_at":"2026-10-16T17:18:51.739Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-101020","fetched_at":"2026-10-23T18:48:36.087640Z","source_modified_at":"2026-10-16T17:18:51.739Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-101020","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://www.hammock.jp/assetview/info/261013.html"},{"source":"CVE List","url":"https://jvn.jp/en/jp/JVN38664315/"}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","ssvc":{"exploitation":"none","automatable":"no","technical_impact":"total","assessed_at":"2026-10-16T16:59:57.697709Z"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-10-16T17:18:51.739Z","content_hash":"69751b35b9227553a7ff280179a37e2fb628f0bdd284c2493c39bc740200382d"}}